Privacy Policy
WebScape is committed to protecting your personal information. This
policy describes what data we collect, how we use it, and the rights
available to you as a visitor to our website or client of our
services.
1. Data Controller
Data Controller: Kamaal Mahmoud — Director, WebScape
Address: Mombasa, Kenya
Phone:
+254 768 673 040
Email:
[email protected]
(hereinafter also referred to as "we", "us" or
"WebScape")
2. Basic Concepts
Personal information:
Any information that
identifies or could reasonably be used to identify you as an
individual — including your name, email address, phone number, IP
address and any data you voluntarily provide through our contact forms
or service enquiries.
Data subject:
The data subject is you — the natural person whose data is
being collected and processed.
Data Controller:
The entity that determines why and how personal data is
processed. WebScape acts as the controller in respect of any data
collected through this website and its services.
Processor:
Any third party that processes data on our behalf, strictly
according to our instructions.
3. Categories of Data, Purpose, Legal Basis and Retention
Categories of data subjects
Purpose of the processing of personal data
Legal basis of processed personal data
Processing time
Categories of data subjects
Website visitors
Purpose of the processing of personal data
Website analytics, service improvement, and retargeting for
WebScape services
Legal basis of processed personal data
Our legitimate interest in understanding how our website is used
and improving our services. Data collected includes IP address,
pages visited, device type, browser and anonymised identifiers
via cookies.
Processing time
Up to 6 months, after which data is anonymised or deleted.
Categories of data subjects
Prospective and current clients
Purpose of the processing of personal data
Responding to service enquiries, preparing project proposals,
and delivering contracted services
Legal basis of processed personal data
Performance of a contract or pre-contractual steps taken at your
request.
Data includes: name, email, phone number,
business details and any information shared through our contact
form or direct correspondence.
Processing time
For the duration of the engagement plus up to 3 years for
contractual record-keeping purposes.
4. Retention of Personal Data
We hold personal data only as long as necessary for the purpose for
which it was collected. Once that period expires, data is either
deleted or anonymised. We do not retain data speculatively.
5. Third Parties and Data Transfers
We may share data with trusted processors — hosting providers, email
platforms and analytics tools — strictly on a need-to-know basis and
under appropriate data processing agreements. We do not sell your
personal data.
Our website uses
Google Analytics to understand site usage. Data
collected by Google Analytics may include pages visited, session
duration, device type, and anonymised IP addresses. Google processes
this data in accordance with its own privacy policy:
Google Privacy Policy. You can opt out using the
Google Analytics Opt-out Add-on.
6. Cookies
We use cookies to maintain site functionality, analyse visitor
behaviour and improve our services. Cookies may be session-based
(deleted when you close your browser) or persistent (stored for a
defined period). Most browsers allow you to manage or block cookies
through your settings; however, blocking certain cookies may affect
site functionality.
7. Data Processing Principles
Lawfulness
We process your data on a lawful
basis at all times.
Purpose limitation
Data is collected for specific, explicit purposes and is not
used for anything incompatible with those purposes.
Data minimisation
We collect only what is necessary for the stated purpose.
Accuracy
We take reasonable steps to keep data accurate and up to
date.
Security
We apply appropriate
technical and organisational measures to protect personal data against
unauthorised access, loss or disclosure.
Transparency
This policy sets out clearly how we handle your data. For
questions, contact us directly.
8. Your Rights
Right of access
You may request a copy of the
personal data we hold about you at any time.
Right to rectification
If the data we hold is inaccurate or incomplete, you may
request that we correct it.
Right to erasure
You may request deletion of your personal data where there is
no overriding legal basis for us to retain it.
Right to restriction
You may ask us to restrict processing of your data in certain
circumstances.
Right to data portability
Where processing is based on your consent or a contract, you
may request your data in a portable format.
Right to object
You may object to processing based on legitimate interest at
any time.
To exercise any of these rights, contact us at
[email protected]
or call
0768 673 040. We
will respond within a reasonable time and without charge unless
requests are excessive or unfounded.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will
be published at this address. Continued use of the website following
an update constitutes acceptance of the revised policy.