Privacy Policy
How we collect, use, share and protect personal data, and the rights you have over it.
Last updated: 24 October 2026
1. Who we are
This policy explains how Finetek Technologies K Ltd, the company that owns Nakkei (“Nakkei”, “we”, “us”), handles personal data when you visit nakkei.com, contact us, or use the Nakkei platform. We follow the Data Protection Act, 2019 of Kenya and its regulations.
When we decide why and how personal data is used, for example to run your account, bill you or answer your enquiry, we are the data controller and this policy applies. When your business stores its own records in Nakkei, such as customers, suppliers or staff, your business is the controller and we process that data on its behalf. Our Data Policy explains how we handle it.
2. What we collect
When you contact us
Your name, email address, phone number, company and anything you choose to tell us in your message or call.
When you or your company use Nakkei
- Account details: name, work email, phone number, job role, company and branch.
- Sign-in and security information: when you sign in, IP address, browser and device type.
- How the service is used, such as the features and pages used, so we can support and improve it.
- Support conversations and the information you share in them.
- Billing contacts and invoice records for your subscription.
When you visit this website
This website does not use analytics, advertising cookies or tracking pixels. The servers that host it may record standard technical logs (IP address, browser, the page requested and the time) to keep the site secure and running. If you choose the light or dark theme, that choice is saved in your own browser and is never sent to us.
3. How we use it, and why we may
We only use personal data where the Data Protection Act allows it:
- To perform our contract with you: setting up and running accounts, providing the service, support and billing.
- To meet legal obligations: keeping tax and accounting records and responding to lawful requests from authorities.
- For our legitimate interests: keeping Nakkei secure, preventing fraud and misuse, fixing problems, improving the product, and telling business contacts about relevant Nakkei features. You can opt out of marketing at any time.
- With your consent: where we ask for it, for example for certain marketing. You can withdraw consent at any time, which does not affect anything done before.
We do not sell personal data, and we do not use it for third-party advertising.
5. Data stored outside Kenya
Some of our service providers, including Amazon Web Services, Google and DigitalOcean, may store or process data outside Kenya. When that happens we transfer data only as Part VI of the Data Protection Act allows, with appropriate safeguards for its security and confidentiality, and we keep a record of those safeguards.
6. How long we keep it
- Account and usage data: for as long as the account is active, then as long as needed to close it properly and deal with any questions.
- Billing and financial records: for as long as Kenyan tax law requires, which is generally at least five years.
- Enquiries from people who don't become customers: only as long as needed to respond and follow up.
- Website server logs: 30 days, for security, then deleted.
7. How we protect it
We use technical and organisational measures suited to the data we hold, including end-to-end encryption, multi-factor authentication, access limited to the people who need it, role-based permissions, approval steps and activity logs in the platform, and regular backups. No system is perfectly secure, so if a breach affecting your personal data happens, we will act quickly and tell you and the ODPC as the law requires.
8. Your rights
Under the Data Protection Act, 2019 you have the right to:
- be told how your personal data is used, as this policy does;
- access the personal data we hold about you;
- have inaccurate or misleading data corrected, and false or misleading data deleted;
- object to the processing of all or part of your personal data;
- receive your data in a structured, commonly used format and have it moved to another provider where this applies;
- not be subject to a decision based only on automated processing that significantly affects you.
To use any of these rights, email digital@nakkei.com. We may need to confirm your identity first, and we will respond within the time the law sets. If the data is part of records your employer or another business keeps in Nakkei, we will pass your request to them, since they control that data.
If you are unhappy with how we have handled your data, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke. We would appreciate the chance to put things right first.
9. Children
Nakkei is a service for businesses and is not aimed at children. We do not knowingly collect personal data from children through this website or for our own purposes.
10. Changes to this policy
We may update this policy as our service or the law changes. The date at the top shows the latest version, and we will tell customers about significant changes before they take effect.
11. Contact us
For any question about this policy or your personal data:
- Email: digital@nakkei.com
- Phone: +254 706 059 906
- Post: Chandaria Innovation Centre, Kenyatta University, Nairobi, Kenya