Privacy Policy
How Drivon Systems collects, uses, stores and protects your personal information.
1. Who We Are
Drivon Systems ("Drivon," "we," "us," or "our") is a digital agency registered in Nairobi, Kenya. We provide SEO, Google Ads management, web development, Android app development, branding, UI/UX design, professional email setup and AI automation services to businesses across Kenya and East Africa.
We operate the website at drivon.co.ke and are the data controller for personal information collected through our website, services and communications.
2. Data We Collect
We collect personal data only when you actively provide it or when it is generated through your use of our website. We never buy data lists or collect data without a clear purpose.
2.1 Information you provide directly
- Contact form submissions — your name, email address, phone number, company name and message content
- Newsletter sign-ups — your email address
- Job applications — your name, contact details, CV, portfolio, education and work history, references and cover note
- Project enquiries — business details, project requirements and budget ranges
- Client onboarding — business registration information, payment details processed via our payment providers
2.2 Information collected automatically
- Usage data — pages visited, time spent, click patterns, referring URLs
- Device information — browser type, operating system, screen resolution
- IP address — used for analytics and security monitoring, not stored long-term in identifiable form
- Cookies — see our Cookie Policy for full details
2.3 Information from third parties
- Google Analytics — aggregated, anonymised website traffic data
- Google Search Console — search performance data for our website
- Payment processors — transaction confirmation data (we do not store full card details)
3. How We Use Your Data
We use the personal data we collect for the following purposes only:
- To respond to enquiries and provide the services you have requested
- To send the newsletter you have subscribed to — only if you have explicitly opted in
- To process job applications and communicate with candidates
- To improve our website and services based on usage patterns
- To comply with legal obligations under Kenyan and applicable international law
- To protect the security and integrity of our systems
- To send transactional communications — project updates, invoices, receipts
We do not use your data for automated profiling or decision-making that produces legal effects. We do not sell your personal data to any third party. Ever.
4. Legal Basis for Processing
Under Kenya's Data Protection Act 2019, we process your personal data on the following legal bases:
5. Data Sharing
We do not sell, rent or trade your personal data. We share data only in the following limited circumstances:
- Service providers — third-party tools that help us operate our business (e.g. email hosting, analytics, payment processing). All are bound by data processing agreements and may only use your data to provide services to us.
- Legal requirements — if required to do so by law, court order or governmental authority in Kenya or another applicable jurisdiction.
- Business transfers — if Drivon Systems is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you before this occurs.
- With your explicit consent — in any other circumstances where we have your specific, informed consent.
Key third-party processors we use include:
6. Data Retention
We retain personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our retention periods are:
- Contact form data — 2 years from last contact, then deleted
- Newsletter subscriber data — until you unsubscribe, then deleted within 30 days
- Job application data (unsuccessful) — 6 months from the date your application is marked unsuccessful, after which we permanently delete your CV, cover letter, supporting documents and any reference contact details you provided
- Speculative applications — kept on file for up to 24 months so we can reach out if a relevant role opens; removed automatically if there has been no activity within that period
- Client project data — 7 years from project completion (for accounting and legal purposes)
- Website analytics — 26 months (Google Analytics default), anonymised
When your data is no longer needed, we delete it securely or anonymise it so it can no longer be linked to you.
7. Your Rights
Under Kenya's Data Protection Act 2019, you have the following rights regarding your personal data:
To exercise any of these rights, email us at privacy@drivon.co.ke. We will respond within 30 days. We will never charge a fee for reasonable requests.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya at odpc.go.ke.
8. Security
We take data security seriously and implement appropriate technical and organisational measures to protect your personal information against accidental loss, unauthorised access, disclosure, alteration or destruction. These include:
- HTTPS encryption on all pages of our website
- Access controls — only authorised team members can access personal data, and only when needed
- Email security — SPF, DKIM and DMARC configured on our domain
- Two-factor authentication on all internal systems
- Regular security reviews of third-party services we use
No system is completely secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at privacy@drivon.co.ke.
9. Third-Party Links
Our website may contain links to third-party websites — client case studies, tools we recommend, news articles. These websites have their own privacy policies, which we have no control over and are not responsible for. We encourage you to review the privacy policy of any external site you visit.
10. Children's Privacy
Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@drivon.co.ke and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or with a notice on our website.
Continued use of our website after changes take effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
12. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact us:
We aim to respond to all privacy-related enquiries within 5 business days.