Privacy Policy
Last updated: 10 August 2026
1. Introduction and data controller
This policy explains how Caventis, registered at Oginga Odinga Street 108, Kisumu 40100, Kenya, collects and uses personal data submitted through this website. Caventis is the data controller for the purposes of Kenya's Data Protection Act, 2019. Questions about this policy can be sent to [email protected].
2. What data we collect
We collect information you provide directly through our contact form — your name, email address, phone number and message content — and technical information stored via cookies, described in our Cookie Policy.
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact form details | Responding to enquiries and bookings | Consent / contract |
| Cookie preference data | Remembering your cookie choices | Consent / legitimate interest |
3. Purposes and legal basis
We process your data to respond to enquiries, arrange sessions, and maintain the basic functioning and security of this website. Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Data sharing and third parties
We do not sell personal data. Information submitted through our contact form is used solely by Caventis to respond to your enquiry and is not shared with third parties except where required by Kenyan law.
5. Retention
Enquiry data is retained only as long as needed to respond to your message and, where a booking follows, to administer that engagement, after which it is deleted or anonymised.
6. Security
We take reasonable technical and organisational steps to protect the data we hold against unauthorised access, loss or misuse.
7. International transfers
We do not routinely transfer personal data outside Kenya. Should this change, any transfer will comply with the safeguards required under the Data Protection Act, 2019.
8. Your rights
Under the Data Protection Act, 2019, and subject to oversight by the Office of the Data Protection Commissioner (ODPC), Kenya, you have the right to access, correct, delete, and object to processing of your personal data, and to lodge a complaint with the ODPC. To exercise these rights, contact us via our contact page.
9. Opt-out and data deletion
Providing personal data through this site is always optional. You may decline optional cookies at any time through the cookie preferences panel, and you may request deletion of any data you've submitted by contacting us through the contact page.