Privacy policy

Data controller

Nelsat Ltd — Riara Road, Kileleshwa, Nairobi, Kenya.
Contact for any data-related question: contact@nelsat.com.

The data we collect

1. What you send us deliberately

The contact form asks for four pieces of information, only two of which are required:

• Name and email address (required) — so we can reply
• Organisation and subject (optional) — to route the reply
• The content of your message

This information is not stored in any database. It is sent by email to our inbox, and an acknowledgement is sent to the address you provided. It then lives only in our mailbox.

2. What the site records technically

• A session cookie (PHPSESSID), strictly necessary for operation: it remembers your language choice and carries the security token that protects the form against fraudulent submissions. It expires when you close your browser and enables no cross-site tracking.
• The host's server logs, which automatically record the IP address, date and page requested, as on any web server. They serve security and technical diagnostics, and fall under our host's responsibility.

What we do not do

We think it is just as useful to state what the site does not contain:

• No analytics tool (no Google Analytics, no equivalent)
• No advertising pixel, no targeting cookie, no profiling
• No sale, rental or exchange of your data
• No automatic subscription to any mailing list
• No automated decision-making about you

Why we process this data

• To answer your enquiry — legal basis: your deliberate approach and our legitimate interest in responding to a business enquiry.
• To keep the site secure — legal basis: legitimate interest in preventing abuse, spam and fraudulent use of the form.

Retention period

Messages received through the form are kept in our mailbox for 3 years from the last exchange, then deleted. If a contract is signed, the related data falls under our accounting and contractual obligations.

Who has access to your data

• The Nelsat team members handling your enquiry
• Our hosting provider, which hosts the website and the mailbox

No other third party receives your data. We disclose it to authorities only upon lawful request.

Web fonts and transfer to Google

This site loads its typefaces from Google Fonts. Technically, your browser therefore issues a request to Google LLC servers (United States), which discloses your IP address to them. This is the only third-party service called when pages are displayed. If you would rather no request left the site, we can self-host these fonts — write to us.

Your rights

Under the Kenya Data Protection Act (2019) and, for individuals located in the European Union, the General Data Protection Regulation, you have the following rights:

• Access the data we hold about you
• Have it corrected if inaccurate
• Request its deletion
• Object to its processing or request its restriction
• Receive a copy in a usable format

To exercise these rights, write to contact@nelsat.com. We reply within 30 days. No justification is needed to request the deletion of a message you sent us.

Complaints

If our answer does not satisfy you, you may refer the matter to the Office of the Data Protection Commissioner of Kenya, or to the data protection authority of your country of residence if you are located in the European Union.

Security

The site is served over HTTPS and emails travel over an encrypted connection. The form is protected against automated and fraudulent submissions. Since security is one of our two disciplines, we apply to our own site the practices we recommend to our clients.

Changes

This policy may change if the site changes. The date of the last update appears at the top of this page.