Privacy Policy

Masterfound Security Group (“Masterfound”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data of everyone who visits this website or engages with our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you under Kenya's Data Protection Act, 2019 (“the DPA”) and its regulations.

This policy applies to masterfound.co.ke and to personal data collected through our enquiry, quote-request, and contact channels. It does not apply to information we hold about you under a signed client service agreement, which is instead governed by the terms of that agreement.

Enquiry & contact data: when you submit our contact form, quote request, or write to us directly, we collect the information you provide — typically your name, email address, phone number, company or organisation, the service you are interested in, and the content of your message.

Technical data: like most websites, our hosting and security infrastructure automatically logs standard technical information — such as IP address, browser type, device type, and pages visited — to keep the site secure, diagnose faults, and understand aggregate usage. We do not use this data to build individual browsing profiles for advertising.

We do not knowingly collect sensitive personal data (such as health, biometric, or financial information) through this website. Please avoid including sensitive details in the free-text message field of our contact form unless necessary to describe your enquiry.

We process your personal data on one or more of the following legal bases recognised under the Data Protection Act: your consent, given by voluntarily submitting a form; our legitimate interest in responding to enquiries, operating a secure website, and marketing our services proportionately; steps necessary to enter into or perform a contract with you, where you engage us as a client; and compliance with a legal obligation, where applicable.

We use the information we collect to respond to enquiries and quote requests; provide, maintain, and improve our security services; communicate with existing and prospective clients about our services; meet contractual, legal, insurance, and regulatory obligations, including those under the Private Security Regulatory Authority framework; and safeguard our website and systems against misuse. We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

We may share your information with service providers who process data on our behalf under contract — for example Web3Forms, which delivers contact-form submissions to our email inbox, and our website hosting provider; professional advisers such as legal, insurance, or audit where necessary; regulators or law enforcement where required by law or to protect life, property, or our legal rights; and, if we are ever involved in a merger, acquisition, or asset transfer, a successor entity, subject to the same protections described here. We do not share your data with advertising networks or data brokers.

Some third-party services we rely on to operate this website — including form-delivery and hosting infrastructure — may process data on servers located outside Kenya. Where this occurs, we expect our providers to maintain security safeguards appropriate to the sensitivity of the data involved, consistent with the cross-border transfer requirements of the Data Protection Act.

We apply technical and organisational measures appropriate to the nature of the data we hold, including access controls restricting who within our organisation can view enquiry data, secure transmission of information submitted through our website, and limiting collection to what is reasonably necessary for the stated purpose. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information against unauthorised access, alteration, disclosure, or destruction. See also our Security Commitment.

We retain personal data only for as long as reasonably necessary to fulfil the purpose for which it was collected, to maintain accurate business records, or to meet legal, accounting, or reporting requirements, after which it is securely deleted or anonymised. Full detail on our retention practices for different categories of information is set out in our Data Retention Policy.

This website is not directed at children, and we do not knowingly collect personal data from anyone under the age of 18 through our enquiry or contact channels. If you believe a child has provided us with personal data, please contact us so we can remove it.

As a data subject under the Data Protection Act, 2019, you have the right to be informed of how your data is used; access the personal data we hold about you; request correction of inaccurate or outdated data; request erasure of data no longer needed for the purpose collected; object to or restrict certain processing; request data portability where applicable; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us using the details below.

You also have the right to lodge a complaint with Kenya's Office of the Data Protection Commissioner (ODPC) if you believe your data protection rights have been infringed.

This website uses a limited set of cookies and similar technologies, described in full in our Cookie Policy.

We may update this policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates when it was last revised; we encourage you to review this page periodically.

For privacy questions or to exercise a data subject right, email info@masterfound.co.ke or call 0733 55 44 89. If you are not satisfied with our response, you may lodge a complaint with Kenya's Office of the Data Protection Commissioner (ODPC).