Last updated: October 2026
1. Who we are
Mtandao Centre ("we", "our", "us") is a digital studio based in
Nairobi, Kenya, providing branding, website, digital product and
social media services. We are the data controller
for personal information collected through this website.
Contact:
Mtandao Centre
Nairobi, Kenya
Email: mtandaocentre@gmail.com
Phone: +254 721 308 700
2. What data we collect
We only collect what we need to run this website and respond to
your enquiries:
-
Information you give us. When you use our
contact form, service enquiry form, or contact us on WhatsApp,
email or phone, we collect your name, business name, email
address, phone number and the content of your message.
-
Information collected automatically (analytics, opt-in).
If you accept analytics cookies, we use Vercel Web Analytics to
collect anonymous, aggregated information such as approximate
location, referring page, device type, browser and pages visited.
Vercel Analytics does not use cookies for tracking and does not
build user profiles.
-
Advertising data (opt-in). If you accept
advertising cookies, Google AdSense and its partners may collect
your IP address, device identifiers, approximate location and
browsing data to serve and measure ads.
We do not knowingly collect special-category data
(such as health, religious or political information), and we do
not knowingly collect data from children under 16.
3. How we use your data and our legal bases
Under the EU/UK GDPR and the Kenya Data Protection Act 2019, we
process your personal data on the following legal bases:
-
Contract and pre-contract steps. To respond to
your enquiry and, if we agree to work together, to deliver the
services you requested.
-
Consent. To serve personalised advertising and
to run analytics. You can withdraw consent at any time via
"Cookie settings" in the footer.
-
Legitimate interests. To protect the security
and integrity of our website and to prevent abuse.
-
Legal obligations. To comply with tax,
accounting and other laws that apply to us.
4. Cookies and similar technologies
This website uses a small number of cookies and similar
technologies (localStorage) for the following purposes:
-
Essential. We store your cookie consent choice
in your browser's localStorage so we do not ask you every time
you visit. This cannot be disabled.
-
Analytics (optional). Vercel Web Analytics
helps us understand which pages are useful. Only loaded if you
accept analytics.
-
Advertising (optional). Google AdSense serves
ads and may use cookies to personalise them. Only loaded if you
accept advertising.
You can change your choices at any time by clicking
Cookie settings in the footer.
5. Who we share data with
We do not sell your personal data. We share it
only with the service providers we need to operate this website
and provide our services:
- Vercel Inc. — hosting and analytics (United States).
- Google LLC — AdSense advertising (United States and other regions).
- Meta Platforms Ireland Ltd. (WhatsApp) — when you choose to contact us via WhatsApp.
Each provider processes data under its own terms and privacy
policy, and — where required — under Standard Contractual Clauses
or another lawful transfer mechanism.
6. International data transfers
Some of our service providers are located outside Kenya and the
EEA, primarily in the United States. When we transfer personal
data outside these regions, we rely on appropriate safeguards such
as the European Commission's Standard Contractual Clauses, the UK
Addendum, and — where applicable — the EU–US Data Privacy
Framework.
7. How long we keep data
-
Enquiries and contact form messages: retained
for up to 24 months after our last communication, then deleted.
-
Client project data: retained for the duration
of the project and up to 7 years afterwards to comply with tax
and accounting obligations.
-
Analytics data: retained by Vercel Web
Analytics on an aggregated basis for as long as the analytics
service is active.
-
Advertising data: retained by Google under
Google's own retention policies (typically up to 18 months for
ad-serving data).
-
Consent record: stored in your browser's
localStorage until you clear it or change your choice.
8. Your rights
Depending on where you live, you may have some or all of the
following rights in relation to your personal data:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data.
- Restriction — ask us to limit how we use your data.
- Portability — ask us to transfer your data to another provider.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — change or withdraw cookie consent at any time.
- Non-discrimination — we will not treat you differently for exercising these rights.
To exercise any of these rights, email
mtandaocentre@gmail.com.
We will respond within 30 days (or sooner where required by law).
9. How to complain
If you believe we have not handled your personal data properly,
you have the right to lodge a complaint with a supervisory
authority:
-
Kenya: Office of the Data Protection
Commissioner (ODPC) —
odpc.go.ke
-
EU/EEA: your local Data Protection Authority.
-
UK: Information Commissioner's Office (ICO) —
ico.org.uk
10. Security
We use HTTPS across the entire site and rely on reputable
infrastructure providers (Vercel, Google) for hosting and
delivery. Where we handle client project data, we use access
controls and encrypted storage. No transmission over the internet
is completely secure, but we take reasonable steps to protect
your data.
11. Children's privacy
This website is not directed at children under 16. We do not
knowingly collect personal data from children. If you believe a
child has provided data to us, please contact us so we can delete
it.
12. Changes to this policy
We may update this policy occasionally. The "Last updated" date at
the top of this page will always reflect the current version.
Material changes will be highlighted on the homepage.
13. Data processing record (summary)
For transparency, this is a summary of our processing activities.
Fuller details are available on request.
-
Contact form / service enquiry form: name,
business, email, phone, message — stored by Mtandao Centre (via
WhatsApp Business and email) — purpose: respond to enquiry —
retention: 24 months.
-
WhatsApp messages: handled by Meta under their
terms — purpose: customer communication — retention: per
WhatsApp policy.
-
Vercel Web Analytics: anonymous page views,
referrer, device class — stored by Vercel — purpose: improve
the site — loaded only with analytics consent.
-
Google AdSense: ad-serving and measurement
data — stored by Google — purpose: serve ads — loaded only with
advertising consent.
-
Consent record: stored locally in your
browser — purpose: honour your cookie choice — retention: until
cleared.
14. How to contact us
Questions about this policy or your data:
Email: mtandaocentre@gmail.com
Phone: +254 721 308 700
WhatsApp: +254 721 308 700