Privacy Policy

Who we are

Jansen Group is a dual-sector innovation hub operating in Kenya, comprising Jansen Tech Consultancy and Jansen Entertainment Solutions. Our registered place of business is Nairobi, Kenya. When this policy refers to “Jansen,” “we,” “us,” or “our,” it means Jansen Group and both of its divisions.

We can be reached at: privacy@jansengroup.co.ke


What this policy covers

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, fill in any of our contact or enquiry forms, engage us for consultancy or technology services, or interact with us in any other capacity — whether as a potential client, existing client, job applicant, partner, or general visitor.

This policy applies to both our general website and our technology platform services. Where our tech services involve processing data on behalf of a client organisation, additional data processing agreements may apply and will be communicated separately.


What information we collect

We collect information in two ways — what you give us directly, and what we observe through your use of our website and services.

Information you give us directly includes your name, email address, phone number, job title, and organisation when you fill in any form on our site. It also includes the content of any message or project description you submit, any documents or files you share with us during an engagement, billing and payment information when you become a client, and correspondence you send us by email or other channels.

Information we collect automatically includes your IP address, browser type, device type, the pages you visit on our site, how long you spend on each page, and how you arrived at our site (for example, through a search engine or a link). This is collected through standard web analytics tools and, where applicable, cookies.

If you are a client engaging our tech consultancy services, we may also process operational or organisational data that you share with us as part of scoping, building, or maintaining a system. This data is treated with the highest level of confidentiality and is used solely for the purpose of delivering your engagement.


Why we collect your information

We only collect information we have a clear reason to hold. The purposes are as follows:

To respond to your enquiry and determine whether and how we can help you. To deliver the services you have engaged us for, including system design, software development, data analytics, digital transformation, and content management. To send you information you have explicitly requested, such as project updates, proposals, or reports. To process payments and maintain accurate financial records. To comply with our legal obligations under Kenyan law, including the Kenya Data Protection Act 2019. To improve our website and understand how visitors interact with it, using anonymised analytics data. To contact you about services that are directly relevant to a prior conversation or engagement, where you have not objected to such contact.

We do not use your data for automated decision-making that produces legal or significant effects on you. We do not build profiles of you for advertising purposes. We do not sell your data to any third party under any circumstances.


Our legal basis for processing your data

We process your personal information on the following legal grounds under the Kenya Data Protection Act 2019 and, where applicable, the General Data Protection Regulation (GDPR) for individuals in the European Union or United Kingdom:

Your consent, where you have actively submitted a form or ticked an opt-in. The performance of a contract, where processing is necessary to deliver services you have engaged us for. Our legitimate interests, where we have a genuine business reason to process data and that reason does not override your rights — for example, improving our services, following up on an expressed interest, or maintaining security on our systems. A legal obligation, where Kenyan law requires us to retain or produce certain records.

You have the right to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.


How we store and protect your information

Your data is stored on secure servers, either hosted in Kenya or with reputable cloud infrastructure providers operating under appropriate data protection standards. We apply industry-standard security measures including encrypted data transmission (SSL/TLS), access controls, and regular security reviews.

Within Jansen Group, access to your personal data is restricted to team members who need it to carry out their work. All staff are required to treat client and contact data with strict confidentiality.

No method of digital storage or transmission is entirely without risk. We take all reasonable steps to protect your data but cannot guarantee absolute security. In the event of a data breach that affects your rights or interests, we will notify you and the relevant authorities as required by law.


How long we keep your information

We keep your data only for as long as necessary for the purpose it was collected, or as required by law.

Enquiry and contact form submissions are retained for up to 24 months from the date of last contact. Client engagement records, including contracts, project files, and correspondence, are retained for a minimum of 7 years from the end of the engagement in accordance with Kenyan financial and legal record-keeping requirements. Website analytics data is retained in anonymised form indefinitely and in identifiable form for no longer than 26 months. Job applicant data is retained for 12 months after the close of a recruitment process, unless you are hired.

When data is no longer needed, it is securely deleted or anonymised.


Who we share your information with

We do not sell, rent, or trade your personal information. We share it only in the following limited circumstances:

With service providers who support our operations — for example, cloud hosting providers, email platforms, accounting software, or payment processors. These providers are contractually required to handle your data securely and only for the purpose of providing their service to us. With professional advisors such as lawyers or accountants, where necessary and under strict confidentiality obligations. With regulators or law enforcement agencies where we are required to do so by law or court order. With a successor organisation in the event of a merger, acquisition, or restructuring of Jansen Group, in which case you will be notified in advance.

We do not share your data with third-party marketers or advertisers.


Cookies and tracking

Our website uses cookies — small text files stored on your device — to make the site work properly and to help us understand how it is used.

Essential cookies are required for the site to function and cannot be switched off. Analytics cookies help us understand visitor behaviour in aggregate, using tools such as Google Analytics. These are anonymised and do not identify you personally. We do not use advertising or tracking cookies.

On your first visit, you will be given the option to accept or decline non-essential cookies. You can also manage or delete cookies at any time through your browser settings. Disabling cookies may affect the functionality of some parts of the site.


Your rights

Under the Kenya Data Protection Act 2019, and where applicable under the GDPR, you have the following rights regarding your personal data:

The right to be informed about how your data is used — which this policy fulfils. The right to access the personal data we hold about you. The right to correct any inaccurate or incomplete information. The right to request deletion of your data, subject to our legal obligations to retain certain records. The right to restrict or object to certain types of processing. The right to data portability, where technically feasible. The right to withdraw consent at any time where consent was the basis for processing. The right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

To exercise any of these rights, contact us at privacy@jansengroup.co.ke. We will respond within 30 days. We may ask you to verify your identity before acting on a request.


Children’s data

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has submitted information to us, please contact us immediately and we will delete it.


Links to other websites

Our website may contain links to third-party sites. This Privacy Policy does not apply to those sites. We encourage you to read the privacy policy of any site you visit. We are not responsible for the content or privacy practices of external websites.


Changes to this policy

We may update this policy from time to time to reflect changes in our services, legal requirements, or best practices. When we do, we will update the “last updated” date at the top of this page. Where changes are significant, we will notify active clients directly by email. We encourage you to review this page periodically.


Contact us

If you have any questions about this policy, how your data is handled, or wish to exercise your rights, please contact:

Jansen Group — Data Privacy Email: privacy@jansengroup.co.ke Location: Nairobi, Kenya

For formal complaints, you may