Privacy Policy

1. Who we are

This website is operated by Mwatha Njoroge ("we", "us"), based in Nairobi, Kenya. We are the data controller for the personal information described in this policy.

[Placeholder: add registered business name, registration number and registered address.]

2. What we collect

We only collect what we need to provide the service you asked for:

• Booking a session: your name, email address, phone number and any notes you choose to share.
• Buying an eBook: your name, email address and phone number.
• Registering for an event: your name, email address, phone number and number of seats.
• Contacting us: your name, email address, optional phone number and your message.
• Newsletter: your email address and optional name.
• Automatically: IP address, browser type and pages visited, used for security and to understand what is useful.

We do not collect or store card numbers, PINs or M-PESA credentials. Payment details are entered directly with our payment processor and never reach our servers.

3. Why we use it

• To deliver bookings, eBooks and event registrations you have paid for.
• To send transactional messages: confirmations, receipts, download links and reminders.
• To respond to enquiries.
• To send newsletters, where you have opted in.
• To keep the platform secure, prevent fraud and meet our record-keeping obligations.

4. Legal basis

We process your information to perform the contract you entered into, to comply with legal obligations, on the basis of our legitimate interest in running and securing the service, and — for marketing email — on the basis of your consent.

5. Who we share it with

We share personal data only with service providers who help us operate:

• Paystack — payment processing. See Paystack's own privacy notice for how they handle your data.
• Our email provider — to deliver transactional and newsletter email.
• Our hosting provider — to run the website and store data.

We do not sell your personal information. [Placeholder: list the specific email and hosting providers in use.]

6. How long we keep it

Transaction records are retained for as long as required for accounting and tax purposes. Newsletter subscriptions are kept until you unsubscribe. Contact messages are retained while the enquiry is live and for a reasonable period afterwards. [Placeholder: confirm exact retention periods.]

7. Your rights

Under the Kenyan Data Protection Act, 2019, you may request access to your personal data, ask for it to be corrected or deleted, object to certain processing, and withdraw consent to marketing at any time. Every newsletter email carries a one-click unsubscribe link. To exercise any of these rights, contact us.

8. Security

The site is served over HTTPS. Passwords are hashed, payment verification happens server-side, and purchasable files are stored outside the public web root and delivered only through private, expiring links. No system is perfectly secure, but we take these obligations seriously.

9. Cookies

We use a small number of strictly necessary cookies to keep your session working and to protect forms against cross-site request forgery. [Placeholder: update if analytics or marketing cookies are added later.]

10. Changes

We may update this policy. The "last updated" date at the top of this page always reflects the current version.