Effective May 2026. This policy is governed by the Kenya Data Protection Act, 2019.
1. Who we are
Angazé Systems Group Limited (Angazé) is the data controller of the personal information collected through angaze.co. We are registered in Kenya under KRA PIN P000000000X with our principal place of business at 124 Manyani East Rd, Nairobi, Kenya.
2. What we collect
We collect only the information you give us directly:
- Name, email address, phone number, and business name when you complete the contact form or book a call.
- Mobile money phone number when you initiate an M-Pesa payment on this site. We do not see or store your M-Pesa PIN.
- Standard server logs (IP address, browser type, pages viewed) for security and to keep the site running.
3. Why we collect it
- To reply to your enquiries and run discovery calls.
- To process deposits and balance payments for work you commission.
- To send you transactional receipts, invoices, and project updates.
- To keep the website secure and improve its content.
4. Who we share it with
We never sell your data. We share only what is strictly necessary with the following processors who power this site:
- Safaricom PLC for M-Pesa payment processing under the Daraja API terms.
- Vercel Inc. for hosting the website (servers in the EU).
- Resend Inc. for sending email receipts and notifications.
- Plausible Analytics for privacy-first, cookie-free traffic statistics.
5. How long we keep it
Enquiry messages: 24 months unless you become a client. Client records: 7 years after the engagement ends, in line with Kenyan tax law. You can ask us to delete your data sooner; see Section 7.
6. Cookies and trackers
This site does not set advertising or cross-site tracking cookies. We use Plausible Analytics, which is cookie-free by design. The only cookies set are essential to the site running (for example, a session token if you sign in to a client portal later).
7. Your rights
Under the Data Protection Act, 2019, you have the right to:
- Be told what data we hold about you.
- Get a copy of that data.
- Correct anything that is wrong.
- Ask us to delete your data, subject to legal record-keeping.
- Object to processing or withdraw consent.
- Lodge a complaint with the Office of the Data Protection Commissioner at odpc.go.ke.
To exercise any of these rights, write to privacy@angaze.co. We respond within 30 days.
8. Security
Data in transit is encrypted with TLS 1.3. Server-side data is held on infrastructure with industry-standard access controls. We do not store payment card numbers; M-Pesa transactions are handled entirely inside the Safaricom Daraja platform.
9. Changes to this policy
We will post any update on this page and revise the effective date. Material changes will be emailed to active clients.
10. Contact
Angazé Systems Group Limited
124 Manyani East Rd, Nairobi, Kenya
Email: privacy@angaze.co