Privacy policy.
How we collect, use and protect your personal data.
Last updated: October 2026
Solfa Technologies ("Solfa Tech", "we", "us") respects your privacy. This policy explains what personal data we collect through this website, how we use it, and your rights under the Kenya Data Protection Act, 2019 and other applicable data protection laws.
1. Who we are
Solfa Technologies is a technology and compliance consultancy based in Nairobi, Kenya. We are the data controller for personal data collected through this website. You can contact us by email at mogambibenson2@gmail.com, on +254 759 194 307, on WhatsApp, or through our contact page.
2. What we collect
- Enquiries: when you use our contact form, we collect your name, company, email, phone number, the service you're interested in and your message.
- WhatsApp and phone: when you contact us this way, we receive your phone number, name and the messages you send.
- AI assistant: the questions you type into Solfa AI, and its answers. We ask you not to enter sensitive personal data.
- Free tools: your answers to the readiness check and project planner stay in your browser. They're only sent to us if you choose to send them through the contact form or WhatsApp.
- Technical data: our hosting provider records basic technical information, such as IP address, browser type and pages requested, for security and reliability.
3. How and why we use it
- To respond to your enquiry and provide the services you ask about (consent and steps before entering a contract).
- To answer your questions through the AI assistant (consent, by choosing to use it).
- To keep the website secure and working (legitimate interests).
- To meet legal obligations (legal obligation).
We do not sell your personal data, and we do not use it for automated decisions about you.
4. Who we share it with
We share personal data only with service providers who help us run this website, under appropriate agreements:
- Cloudflare (website hosting and security)
- Anthropic (powers the Solfa AI assistant; your chat messages are processed to generate answers)
- FormSubmit (delivers contact form messages to our email inbox)
- WhatsApp (Meta), if you choose to contact us on WhatsApp
Where we refer you to our partner law firm, we will only share your details with your agreement.
5. International transfers
Some of these providers process data outside Kenya, including in the United States and Europe. We rely on providers with appropriate safeguards for personal data, as required by the Data Protection Act.
6. How long we keep it
We keep enquiry records for up to two years after our last contact, unless you become a client, in which case we keep records for as long as needed for the engagement and our legal obligations. We do not keep AI assistant conversations on our own systems.
7. Cookies
This website does not use advertising or tracking cookies. It uses your browser's temporary session storage only to carry your readiness check or project planner summary to the contact form, and this is cleared when you close the tab.
8. Your rights
You have the right to:
- be informed about how your data is used
- access the personal data we hold about you
- ask us to correct or delete it
- object to or restrict how we use it
- withdraw your consent at any time
- receive your data in a portable format
To exercise these rights, contact us. If you're not satisfied with our response, you can complain to the Office of the Data Protection Commissioner.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and limited access.
10. Changes
We may update this policy from time to time. The date at the top shows when it was last changed.