Privacy & Data Control Policies — Primeforce Tech Limited
Primeforce Tech Limited — Kenya

Privacy & Data Control Policies

Our commitment to transparency, data security, and your rights as a user of Primeforce Tech Limited products and services.

📅 Effective: January 2025 [email protected] 📍 Nairobi, Kenya
Overview

Scope of this Privacy Policy

This Privacy Policy is made by Primeforce Tech Limited for all services offered by the company. Our goal is to be explicit about the information we gather, how we use it, and how we will not use it.

This Policy applies to all Primeforce Tech Limited websites that link to it, our mobile applications, and applications posted on Primeforce Tech Limited’s software platform. It does not apply to websites, products, or services that have a separate privacy policy.

This policy is divided into three parts: Part I — information Primeforce Tech Limited collects and controls; Part II — information processed on your behalf; and Part III — general provisions covering security, legal obligations, and notifications.
Part I — Collection

Information we collect and control

We collect information only if we need it for a legitimate purpose. Information comes from three sources: information you provide directly, information we collect automatically, and information from third parties.

Information you provide directly

  • Account sign-up: Name, contact number, email address, company name, country, username, and password. You may optionally provide a profile photo, timezone, and security question for password recovery.
  • Event registrations and form submissions: Information submitted when registering for webinars or seminars, subscribing to newsletters, downloading materials, participating in surveys, or requesting customer support.
  • Payment processing: Name and contact information. We do not store payment card details — only a transaction reference for receipting purposes.
  • Testimonials: Where you authorise us to post testimonials, we may include your name and personal information. You will review and approve content before publication. To update or delete a testimonial, contact [email protected].
  • Interactions with Primeforce Tech Limited: We may record, analyse, and use interactions with our sales and customer support professionals to improve our service to you and other customers.

Information collected automatically

  • Browser, device, and server data: IP address, browser type, language preference, timezone, referring URL, access time, operating system, and mobile network information.
  • First-party cookies and tracking technologies: We use temporary and permanent cookies to identify users and enhance experience. We use only first-party cookies — we do not use third-party cookies or third-party tracking technologies on any of our websites.
  • Application logs and analytics: Clicks, scrolls, features accessed, access frequency, errors, performance data, storage utilised, user settings, and device locations — used to understand and improve our products.

Information from third parties

  • Federated authentication providers: When you log in via LinkedIn, Microsoft, or Google, those services authenticate your identity and may share your name and email address with us.
  • Referrals: If someone refers our products to you, they may have provided your name, email, and other details. Contact [email protected] to request removal.
  • Reselling partners and service providers: Partners may pass your name, email, and company information to us when you express interest in our products or attend Primeforce-sponsored events.
  • Social media and public sources: Public posts, comments, and profile information when you interact with us on platforms such as Facebook, Twitter, or Instagram. Note: this information may remain with us even after deletion from the social media site.
Part I — Usage

How we use your information

We use your information only for the purposes for which it was collected or as otherwise described in this policy.

  • To communicate with you about products and services you use, policy or Terms of Service changes, and important notices
  • To keep you informed about new products, upcoming events, offers, and promotions
  • To conduct surveys and solicit feedback on our products and services
  • To set up, maintain, and secure your account, including enabling collaboration and data backups
  • To understand how users interact with our products, monitor performance, and drive improvements
  • To provide customer support and analyse customer interactions to improve service quality
  • To detect and prevent fraudulent transactions and other illegal activities
  • To update our records, identify prospective customers, and offer products that may be of interest to you
Part I — Your choices

Your choices in information use

  • Opt out of non-essential communications: Use the unsubscribe mechanism in any newsletter or marketing email. You will continue to receive essential transactional communications.
  • Disable cookies: You can disable browser cookies before visiting our websites. Some features may not function correctly without cookies.
  • Optional information: You are not required to provide optional profile fields such as a profile photo. You may delete or update optional information at any time.
Part I — Sharing

Who we share your information with

We do not sell personal information. We share information only as described in this policy and only with parties who adopt appropriate security measures.

  • Employees and contractors: Access is limited to those with a legitimate need. All employees and contractors must sign a confidentiality agreement covering customer information.
  • Third-party service providers: We may share information with service providers (e.g., email and SMS messaging partners) who are authorised to use your information only to provide those services.
  • Legal and enforcement disclosures: We may disclose information to comply with a legal obligation, prevent fraud, enforce our agreements, or protect user safety.
Part I — Your rights

Your rights with respect to your information

If you are in Kenya or the East African region, you hold the following rights. Primeforce Tech Limited undertakes to honour these rights regardless of where you live.

Right to access

Request access to (and a copy of) the categories of personal information we hold about you, including its source, purpose, period of processing, and who it has been shared with.

Right to rectification

Update or correct inaccurate information we hold about you, or request that supplemental information be added to our database.

Right to erasure

Request deletion of your personal information where it is no longer necessary for the original collection purpose.

Right to restriction of processing

Request restriction on use of your information in certain circumstances, such as when you have objected and we need to verify our legitimate grounds.

Right to data portability

Transfer your information to a third party in a structured, machine-readable format where processing is based on consent or automated means.

Right to object

Object to the use of your information for certain purposes, such as direct marketing.

Right to complain

Lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or other appropriate supervisory authority regarding our collection, use, or sharing of your information.

Part I — Retention

Retention of information

We retain your personal information for as long as required for the purposes stated in this policy. Where permitted or required by law (e.g., maintaining suppression lists, complying with legal proceedings), we may retain information for longer periods.

6 mo
Active database deletion after account termination
3 mo
Backup deletion following active database removal

When we no longer have a legitimate need to process your information, we will delete or anonymise it from active databases and securely isolate it from further processing on backup media until deletion is possible.

Part III — General

General provisions

Children’s privacy

Our products and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child under 18 has provided personal information to us, please contact [email protected].

Security

We take data security seriously and have implemented appropriate administrative, technical, and physical safeguards to prevent unauthorised access, use, modification, disclosure, or destruction of information. For concerns, please review our Security Policy or write to [email protected].

Locations and international transfers

By using our products or services, you consent to the processing, transfer, and storage of your personal information within Kenya and other countries where Primeforce Tech Limited operates.

Do Not Track (DNT)

We currently do not take action in response to browser Do Not Track signals, as no universal standard for DNT response has been established.

External links and third-party sites

Some pages on our websites may contain links to third-party sites with separate privacy policies. We recommend reviewing those policies before sharing personal information with any third party.

Blogs and public forums

Information shared in our public blogs and forums may be visible to others and may remain after account termination. Contact [email protected] to request removal.

Social media widgets

Our websites include social media widgets (such as Facebook and Twitter buttons) governed by the privacy policies of those companies. These widgets may collect your IP address and set cookies.

Business transfers

We do not intend to sell our business. In the unlikely event of a merger or acquisition, the acquiring entity will be legally bound to honour our commitments to you. We will notify you by email or prominent website notice of any change in ownership.

Data Processing Addendum

To support compliance with data protection obligations under applicable regulations, we can provide a Data Processing Addendum (DPA) based on Standard Contractual Clauses. Request one at [email protected].

Notification

Policy changes and compliance

We make every effort, including periodic reviews, to ensure that personal information is processed in accordance with this policy. If you have concerns, write to [email protected].

We may modify this policy at any time. For significant changes affecting your rights, we will provide at least 30 days’ advance notice by email. Minor changes will be posted at www.primeforce.africa without individual notification.

Your continued use of Primeforce Tech Limited products or services after the effective date of changes constitutes agreement to the modified policy.
Part II — Overview

Information Primeforce Tech Limited processes on your behalf

When you use Primeforce Tech Limited applications to handle other people’s data — such as your customers’ or employees’ information — you are entrusting that data to us for processing. This section governs how we handle that data.

Primeforce Tech Limited is certified as a data processor under the Office of the Data Protection Commissioner (Kenya), providing you with rights over how data entrusted to us is processed. All data you entrust to us for processing is collectively referred to as service data.

Data Processor — Kenya DPC
East African Community
GDPR-aligned DPA available
Part II — Service data

What constitutes service data

Service data encompasses any data you entrust to Primeforce Tech Limited through use of our services or requests for technical support.

Data provided in connection with services

This includes information about your customers and employees (if you are a data controller), or data you hold on behalf of another person for a specific purpose (if you are a data processor). Service data may be stored on our servers when you use our services, or transferred to us as part of a request for technical support.

Data from mobile devices

When you elect to allow it, certain mobile applications may access your camera, call history, contacts, photo library, and other device information. Our applications require such access only to provide their stated services. Location-based information may also be collected for functions such as locating nearby contacts — this information is shared only with our mapping providers for that specific purpose.

You may disable mobile application access to any of this information at any time through your device settings.

Part II — Ownership

Ownership and control of your service data

We recognise that you own your service data. We provide complete control of service data through the following capabilities:

Access

You can access your service data at any time through our products and services.

Integration and sharing

You can share your service data through supported third-party integrations that you choose to enable.

Export or deletion

You can request export or complete deletion of your service data at any time.

Part II — Processing

How we use service data

We process your service data when you provide instructions through the various modules of our services. For example:

  • When you generate an invoice, your customer’s name and address are used to populate the invoice document.
  • When you use our campaign management tools for email marketing, the email addresses on your mailing list are used solely for the purpose of sending those emails.

We process service data only in accordance with your instructions and do not use it for any other purpose without your consent.

Part II — Sharing

Who we share service data with

Employees and independent contractors

Access to service data is restricted to specific individuals who require it to provide services, resolve errors, or verify reported issues. All such access is logged and audited. Our employees are trained on privacy and security guidelines and are bound by internal privacy safeguards.

Collaborators and other users

Some products allow collaboration with other users or third parties. When you initiate collaboration (e.g., sharing a document for co-editing), your name and profile picture may be visible to your collaborators in the context of your edits.

Third-party integrations you enable

When you choose to enable third-party integrations, you may be granting those third parties access to service data and personal information. We encourage you to review the privacy practices of any third-party integration before enabling it.

Group entities and sub-processors

In order to deliver services and technical support, Primeforce Tech Limited may engage other group entities and third-party sub-processors. These engagements are governed by appropriate data processing agreements.

Part II — Mobile

Mobile application data

Data stored on your mobile device and location information accessed by our mobile applications will be used within the context of that application. Where you share this data with us (e.g., via account sync), it will be stored on our servers and associated with your account. Where data remains only on your device, it stays with you unless explicitly shared.

You retain full control and may revoke application access to device data at any time through your mobile device’s privacy and permissions settings.

Part II — Retention

Retention and deletion of service data

We hold service data in your account for as long as you choose to use Primeforce Tech Limited services.

6 mo
Active database clean-up cycle after account termination
3 mo
Backup deletion following active database removal

After termination of your account, service data will be removed from active databases during the next scheduled clean-up (occurring every 6 months), and subsequently deleted from backup systems within 3 months.

Part II — Data subjects

Data subject requests

If you are located in Kenya or the East African region and you believe that Primeforce Tech Limited stores, uses, or processes your information on behalf of one of our customers, please contact that customer directly if you wish to:

  • Access your personal data
  • Rectify or correct inaccurate information
  • Request erasure of your data
  • Restrict or object to processing
  • Export your personal data

We will work with our customer to respond to your request within a reasonable timeframe.

Part III — Limits

Limits on privacy assurances and legal disclosures

There are some limitations to the privacy we can promise you.

Legal and enforcement disclosures

We may be required by law to preserve or disclose personal information and service data to comply with any applicable law, regulation, legal process, or governmental request, including to meet national security requirements. We may also disclose information if necessary to prevent fraud, investigate suspected illegal activity, enforce our agreements or policies, or protect user safety.

Business transfers

In the unlikely event that we sell our business or are acquired, the acquiring entity will be legally bound to honour our commitments. You will be notified by email or through a prominent website notice of any change in ownership or changes to how your data is used.

Compliance

We conduct periodic reviews to ensure personal information is processed in accordance with this policy. If you have concerns about our adherence, contact us at [email protected]. We will coordinate with appropriate regulatory authorities to address your concerns effectively.

Primeforce Tech Limited is certified as a data processor under the Office of the Data Protection Commissioner (Kenya). We are prepared to sign a Data Processing Addendum (DPA) based on Standard Contractual Clauses on request.