Privacy Policy

01Overview

Tradescene Tech Limited ("Tradescene," "we," "us," or "our") is a private engineering company headquartered in Muranga, Kenya, offering custom software, cybersecurity, and digital transformation services across East Africa. This policy explains what information we collect when you visit tradescene.org or work with us directly, why we collect it, and the choices you have.

If you only remember one thing from this page: our contact form doesn't have a backend. When you submit it, it opens your own email client with the message pre-filled — your message goes from your inbox to ours, not through our servers. We built it that way on purpose. The details are below.

02Information we collect

We collect information in two ways: what you give us directly, and what your browser sends automatically.

What you give us

• Contact details — name, email address, company, and project details, if you reach out through our contact page, email us directly, or book a call.
• Engagement information — anything you share with us during a scoping call, proposal, or active project, such as technical requirements or business context needed to do the work.

What your browser sends automatically

• Standard server logs — IP address, browser type, referring page, and timestamps, generated by any web request. These are used only for security monitoring and are not linked to an identity.
• A theme preference — whether you're using light or dark mode, saved in your browser's local storage so we don't ask you every visit. See our Cookie Policy for the full detail — it's the only thing we store client-side.

03How we use it

We use the information above to:

• Respond to enquiries and route them to the right department;
• Scope, propose, deliver, and support engineering work you've asked us for;
• Maintain the security and reliability of our own systems and this website;
• Meet legal, tax, and regulatory obligations in Kenya.

We do not sell your information. We do not use it to build advertising profiles. We do not have an advertising business — there's nothing to sell it into.

04Legal basis

We process personal data in accordance with Kenya's Data Protection Act, 2019 (Act No. 24 of 2019) and its regulations, under the supervision of the Office of the Data Protection Commissioner (ODPC). Depending on the situation, our legal basis is one of the following:

• Consent — when you voluntarily send us a message or sign up to hear from us;
• Contract — when processing is necessary to deliver a service you've engaged us for;
• Legitimate interest — for security logging and fraud prevention, balanced against your rights; or
• Legal obligation — for tax, accounting, and statutory record-keeping.

05Cookies & tracking

Short version: we don't run analytics, we don't run advertising pixels, and we don't set tracking cookies. The only thing we store in your browser is a theme preference. The full breakdown — what it is, why it's there, and how to clear it — lives on its own page.

06Sharing & disclosure

We don't sell, rent, or trade your information. We share it only in these narrow cases:

• Service providers — infrastructure and tooling vendors (such as hosting and email delivery) who process data strictly on our instructions, under confidentiality obligations;
• Legal requirements — if required by Kenyan law, court order, or a lawful request from a regulatory authority;
• Business transfers — in the unlikely event of a merger or acquisition, where continuity of service requires it, and only under the same protections described here.

07Data retention

We keep information only as long as it serves the purpose it was collected for:

08Your rights

Under the Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data, subject to legal retention obligations;
• Object to or restrict certain processing;
• Data portability, where technically feasible; and
• Lodge a complaint with the Office of the Data Protection Commissioner if you believe your rights have been infringed.

To exercise any of these, email hello@tradescene.org — we'll respond within 30 days, as required by law.

09Security

We build defensively by default — it's the same posture we apply to client work. This site is served over HTTPS, our contact flow avoids storing your message on a server entirely, and access to any systems that do hold data is limited to the people who need it. No system is unbreakable; if we ever become aware of a breach affecting your data, we'll notify you and the ODPC as required by law.

10International transfers

We're based in Kenya and primarily process data here. Where a service provider (for example, infrastructure hosting) processes data outside Kenya, we only work with providers that maintain data protection standards consistent with the Data Protection Act, 2019.

11Children's privacy

Our services are directed at businesses, not children. We don't knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we'll delete it.

12Changes to this policy

We'll update this page as our practices evolve and update the "last updated" date above. For material changes, we'll post a notice on the homepage ahead of the change taking effect.

13Contact us

Questions, access requests, or complaints about how we handle your data can go to hello@tradescene.org, addressed to our data protection contact. We're headquartered in Muranga, Kenya.