Legal

Privacy Policy

Last updated: July 2026  ·  Biran Technologies, Nairobi, Kenya

1. Introduction

Biran Technologies (“we”, “us”, “our”) is a technology engineering and automation agency registered in Nairobi, Kenya. We are committed to protecting the personal data of our clients, prospects, and website visitors.

This Privacy Policy explains what personal data we collect, how we use it, how long we retain it, and what rights you have over it. It applies to data collected through our website at biran.co.ke, our contact and booking forms, and our client engagement process.

For UK and EU residents, we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For Kenyan residents, we comply with the Kenya Data Protection Act 2019 (DPA 2019).

2. Data We Collect

We collect personal data in two ways:

Information you provide directly:

  • Name and contact details (email address or WhatsApp number) submitted via our contact form or Calendly booking widget.
  • Company name, project description, and service requirements you include in messages to us.
  • Payment details (processed by Stripe, M-Pesa, Wise, or Payoneer — we do not store raw card data).
  • Communications you send us by email or WhatsApp.

Information collected automatically:

  • Anonymous analytics data via Vercel Analytics (page views, referrer, device type). This data is aggregated and does not identify you individually.
  • IP address and browser type for server logs and security monitoring. These logs are retained for 30 days.

3. How We Use Your Data

We use the personal data you provide for the following purposes:

  • Project delivery: To scope, build, and deliver the services you have engaged us for, and to communicate with you throughout the engagement.
  • Business operations: To issue invoices, process payments, and meet our tax and accounting obligations under Kenyan law.
  • Service improvement: To understand how our website is used and improve our content and offerings. We use only anonymised, aggregate analytics data for this purpose.
  • Legal compliance: To comply with applicable law, including responding to lawful requests from government authorities.

We will never sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data to send unsolicited promotional communications unless you have explicitly opted in.

4. Data Sharing

We share your data only where strictly necessary. The following third-party service providers may process your data on our behalf:

  • Vercel: Hosts our website and analytics. Data processed in the United States under Standard Contractual Clauses (SCCs) for UK/EU data.
  • Calendly: Processes your name and email when you book a call. Governed by Calendly’s own privacy policy and GDPR-compliant data processing agreement.
  • Stripe / Wise / Payoneer / M-Pesa (Safaricom): Payment processors. We do not have access to your full card or bank details — only to transaction references.
  • Email service provider: Used to receive enquiry notifications sent from our contact form. Email content is not shared with other parties.

5. Data Retention

  • Contact enquiries (non-clients): Retained for 24 months from the date of last contact, then deleted.
  • Client project data: Retained for 7 years from project completion to meet Kenyan tax and legal record-keeping requirements under the Tax Procedures Act 2015.
  • Payment records: Retained for 7 years as required by Kenyan financial regulations.
  • Server logs: Retained for 30 days, then deleted automatically.
  • Analytics data: Anonymised and aggregated; no individual retention limit applies.

6. Your Rights

Depending on your location and applicable law, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your data, subject to legal retention obligations (e.g., tax records).
  • Right to data portability: You can ask us to provide your data in a structured, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests.
  • Right to restrict processing: You can ask us to pause processing while a dispute is resolved.

To exercise any of these rights, email us at hello@biran.co.ke. We will respond within 30 days. If you are in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

7. Cookies

Our website uses only essential session cookies (required for the website to function) and anonymous analytics cookies via Vercel Analytics. We do not use advertising cookies, tracking pixels, or third-party retargeting scripts.

Vercel Analytics is privacy-first by design: it does not fingerprint users, does not set persistent tracking cookies, and does not share data with advertisers. You can learn more at vercel.com/analytics.

8. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, accidental loss, and disclosure. Our website is served over HTTPS. Access to client data is restricted to personnel who require it for project delivery.

No method of electronic transmission or storage is 100% secure. If you believe your data has been compromised, contact us immediately at hello@biran.co.ke.

9. International Data Transfers

Our hosting infrastructure (Vercel) is located in the United States. Where we transfer personal data from the UK or EU to the US, we rely on Standard Contractual Clauses (SCCs) as the legal basis for the transfer under UK GDPR Article 46.

Transfers of data from Kenya to international processors are made in compliance with Part IV of the Kenya Data Protection Act 2019, which requires that recipient countries provide adequate data protection.

10. Children’s Privacy

Our services are intended for businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data to us, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date at the top of this page and, where practical, by direct notification to active clients.

12. Contact Us

For privacy enquiries, data requests, or complaints:

13. Governing Law

This Privacy Policy is governed by the laws of Kenya, including the Kenya Data Protection Act 2019 and its subsidiary legislation. For clients and users based in the United Kingdom, we additionally comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For clients in the European Union, we comply with EU GDPR (Regulation 2016/679).

Read our Terms of Service →