Privacy Policy

Privacy Policy for ISFAmedia.com

Effective Date: January 01, 2025 Last Updated: April 13, 2025

1. Introduction

Welcome to isfamedia.com (the “Site”). ISFA Media (“We”, “Us”, “Our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, process, disclose, and safeguard your information when you visit our Site.

This Policy is prepared in compliance with the requirements of the Kenya Data Protection Act, 2019 (DPA) and other applicable data protection laws.

By using the Site, you consent to the data practices described in this policy. If you do not agree with the terms of this privacy policy, please do not access the site.

Data Controller: ISFA Media 254, Limuru 00100, Nairobi, Kenya Email: isfamedia7@gmail.com is the data controller responsible for your personal data collected through the Site.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

• Personal Data You Provide to Us: Personally identifiable information, such as your name, email address, phone number, or any other data collected directly, e.g., through contact forms, comments, newsletter sign-ups, account registration, that you voluntarily give to us when you interact with the Site.
• Derivative Data (Automatically Collected): Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.
• Cookies and Tracking Technologies: We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Site to help customize the Site and improve your experience. [See Section 10 for more details].
• Usage Data: Information about how you use the Site, such as the pages you visit, the links you click, the time spent on pages, and other actions taken on the Site.

3. How We Collect Your Information

We collect information through:

• Direct Interactions: When you fill in forms (e.g., contact forms, comment forms, newsletter sign-ups), correspond with us by email, or otherwise provide data directly.
• Automated Technologies: As you navigate through the Site, we may automatically collect Technical Data about your equipment, Browse actions, and patterns using cookies, server logs, and similar technologies.
• Third Parties: We may receive information from third parties such as analytics providers (e.g., Google Analytics), advertising networks, or search information providers .

4. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

• Operate and maintain the Site.
• Respond to your comments, questions, and provide customer service.
• Send you administrative information, such as updates to our terms, conditions, and policies.
• Send you promotional information, such as newsletters, only if you have opted-in to receive them. You can opt-out at any time.
• Improve the Site and our service offerings through monitoring and analysis of usage and trends.
• Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
• Ensure the security of our Site and systems.
• Comply with legal and regulatory obligations.
• Any other Lawful use.

5. Legal Basis for Processing Personal Data (under Kenya DPA)

We process your personal data based on the following legal grounds as outlined in the Kenya DPA:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to a newsletter).
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract [If applicable, e.g., providing a paid service].
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided these interests do not override your fundamental rights and freedoms (e.g., for site security, analytics to improve the site, responding to inquiries).

6. Disclosure of Your Information

We do not sell, trade, or rent your Personal Data to others. We may share information we have collected about you in certain situations:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
• Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including data analysis, email delivery, hosting services, customer service, and marketing assistance. These providers are obligated to protect your data. Examples include categories or specific examples like Google Analytics, Mailchimp, Hosting Provider Name.
• Business Transfers: If ISFA Media reorganizes or sells all or a portion of our assets, undergo a merger, or are acquired by another entity, we may transfer your information to the successor entity.
• With Your Consent: We may disclose your personal information for any other purpose with your consent.

7. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. We use measures like Secure Socket Layer (SSL) technology for data transmission, access controls, and secure hosting environments. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. Any information disclosed online is vulnerable to interception and misuse by unauthorized parties.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements.

9. Your Data Protection Rights (Under Kenya DPA)

Under the Kenya Data Protection Act, 2019, you have rights including:

• Right to be informed: To be informed about how we collect and use your personal data.
• Right of access: To request access to the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure (‘right to be forgotten’): To request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
• Right to restrict processing: To request the restriction or suppression of your personal data.
• Right to data portability: To obtain and reuse your personal data for your own purposes across different services.
• Right to object: To object to the processing of your personal data in certain circumstances (e.g., for direct marketing).
• Rights related to automated decision-making and profiling: [Include if applicable].
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact details provided in Section 14. We may need to request specific information from you to help us confirm your identity.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information.

• What are Cookies: Small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie.
• How We Use Them: We use cookies for various purposes, such as enabling site functionality, analyzing site performance (Analytics Cookies), remembering your preferences (Functional Cookies), and Marketing/Advertising Cookies if used.
• Your Choices: Most web browsers are set to accept cookies by default. You can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Site. For non-essential cookies, we may seek your consent via a cookie banner or tool.

11. Children’s Privacy

Our Site is not intended for children under the age of 13 or 18 depending on Kenyan law and International applicable Laws of specific countries for an adult. We do not knowingly collect personal data from children under this age. If we become aware that we have inadvertently collected personal data from a child under the specified age without verifiable parental consent, we will take steps to delete the information as soon as possible. If you believe we might have any information from or about a child under 13, please contact us.

12. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of Kenya where the data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and Kenyan law. If we transfer your data outside Kenya, we will ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or explicit consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have questions or comments about this Privacy Policy, or wish to exercise your data protection rights, please contact us at:

ISFA Media Address: 254, Limuru 00100, Nairobi, Kenya Email: isfamedia7@gmail.com, Phone: +254 711 147297 / +254 784 016169

15. Right to Complain

You have the right to lodge a complaint regarding the processing of your personal data with the Office of the Data Protection Commissioner (ODPC) in Kenya if you believe ISFA Media has infringed your rights under the Data Protection Act, 2019.

Office of the Data Protection Commissioner — https://www.odpc.go.ke/