Privacy Policy

Effective Date: 1st January 2026

1. About Us

NillTech Solutions Ltd is a company registered under company number PVT-9XUKLQ7M with its registered office at RUAI ROAD, BUILDING: SUSWA COURT, Kenya ("Us", "We", or "NillTech"). We offer a secure and efficient platform that connects local and international clients with skilled freelancers through our website, www.nilltechsolutions.com.

2. Purpose of This Document

This Privacy Policy explains how NillTech Solutions Ltd collects, uses, shares, and protects your personal information when you use our Website and Services. It also outlines your rights regarding your personal data under the Data Protection Act, 2019 of Kenya.

This policy applies to all users of our Website and Services, including clients, freelancers, and visitors.

3. Data Protection Principles

We are committed to complying with the Data Protection Act, 2019 and other applicable laws. Your personal information will be:

  • Processed lawfully, fairly, and transparently.
  • Collected only for specified, explicit, and legitimate purposes.
  • Adequate, relevant, and limited to what is necessary.
  • Accurate and kept up to date.
  • Retained only for as long as necessary.
  • Stored securely to prevent unauthorized access, loss, or damage.

4. Information We Collect

We may collect the following categories of personal information:

Contact Details:

  • Name
  • Email address
  • Phone number
  • Physical address

Payment Information:

  • Credit/debit card details
  • M-Pesa details
  • Other payment information

Technical Data:

  • IP address
  • Browser type
  • Device information
  • Usage data

Service Data:

  • Information related to the services you request or provide (e.g., project details, files, or communications).

We do not collect "special categories" of sensitive personal data (e.g., race, religion, health data) unless explicitly required and with your consent.

5. How We Collect Your Information

We collect personal information:

  • Directly from you when you register on our Website, place an order, or communicate with us.
  • Automatically through cookies and similar technologies when you interact with our Website.
  • From third parties, such as payment processors or freelancers, when necessary to provide our Services.

6. How We Use Your Information

We use your personal information for the following purposes:

  • To provide and manage our Services.
  • To process payments and fulfill orders.
  • To communicate with you about your account or services.
  • To improve our Website and Services.
  • To comply with legal obligations and protect our rights.

7. Legal Basis for Processing

We process your personal information based on:

  • Contractual Necessity: To fulfill our obligations under the Terms of Service.
  • Legitimate Interests: To improve our Services and ensure security.
  • Consent: Where required, we will obtain your explicit consent.
  • Legal Obligations: To comply with Kenyan laws and regulations.

8. Data Sharing

We may share your personal information with:

  • Service Providers: We work with freelancers, IT support, payment processors, and other third parties to provide our Services.
  • Legal Authorities: We may disclose information when required by law or to protect our rights.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, third parties may have access to your information.
  • Third-party Compliance: We ensure all third parties comply with data protection laws and maintain the confidentiality of your information.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encrypt sensitive data during transmission and storage.
  • Conduct regular security assessments and updates.
  • Restrict access to personal information on a need-to-know basis.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once no longer needed, your data will be securely deleted or anonymized.

11. Your Rights Under the Data Protection Act, 2019

You have the following rights regarding your personal information:

  • Access: You can request a copy of the personal data we hold about you.
  • Correction: If you find any inaccuracies or incompleteness in your data, you can request correction.
  • Erasure: Under certain conditions, you can request the deletion of your data.
  • Restriction: You can request restriction of processing of your data under certain conditions.
  • Objection: You can object to processing of your data based on legitimate interests.
  • Data Portability: You can request the transfer of your data to another party.

To exercise these rights, contact our team at [email protected]

12. Freelancers and Contractors

If you are a freelancer or contractor working with NillTech:

  • We collect your personal information (e.g., name, contact details, KRA PIN, and payment information) to facilitate your engagement.
  • Your data will be used for contractual purposes, payment processing, and compliance with Kenyan labor laws.
  • You are responsible for ensuring your tax and legal compliance as an independent contractor.

13. International Data Transfers

If we transfer your personal information outside Kenya, we will ensure adequate safeguards are in place to protect your data in accordance with Kenyan law.

14. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our Website. You can manage your cookie preferences through your browser settings.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our Website, and we will notify you of significant updates.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal information, please contact us at:

Last Updated: 1st January 2026

  • Consent: By registering, you consent to data processing for Platform operations, marketing (opt-out available), and legal compliance.
  • Data Subject Rights: Access, rectify, erase, or object to processing via [email protected]. We respond within 14 days per DPA.
  • Security: We use encryption and access controls; report breaches to ODPC within 72 hours.
  • Third Parties: Data shared only with Freelancers/Clients (as needed), processors (e.g., payment gateways), or authorities.