Privacy Policy

1. Overview & Scope

KraftCodes ("we," "our," or "us") is a software and product engineering consultancy headquartered in Nairobi, Kenya, with engineering representation in Belfast, United Kingdom. We engineer custom enterprise systems, ERPs, health tech applications, government solutions, advanced security controls, and mobile applications.

This Privacy Policy describes how we collect, use, store, and safeguard personal and technical data when you visit our website at kraftcodes.com, interact with our digital services, or engage our team for custom software development projects.

2. Information We Collect

Depending on how you interact with KraftCodes, we collect the following categories of information:

• Consultation & Project Inquiries: Name, professional email address, organization name, phone number, and project specifications provided when reaching out via our contact forms or email.
• Technical & System Specifications: System architecture requirements, database schemas, API requirements, and domain parameters shared under Non-Disclosure Agreements (NDAs) during client engagements.
• Automated Usage Data: Standard server log entries, IP addresses, browser types, device identifiers, operating system version, and telemetry data collected when navigating our digital properties.
• Device Authentication & Session Data: For specialized applications requiring single-device authentication or session-locking controls, tokenized device session identifiers and hashed hardware tokens are processed strictly for authorization and access security.

3. How We Use Collected Information

We process collected data for legitimate business engineering purposes, including:

• Fulfilling contractual agreements and delivering custom software, web applications, and mobile solutions.
• Evaluating project requirements, technical feasibility, and architectural scope for prospective client engagements.
• Verifying device authentication and session integrity for applications requiring single-device authorization control.
• Maintaining digital security, preventing fraud, and optimizing client-facing network infrastructure.
• Communicating critical technical updates, system releases, or response to technical inquiries.

4. Intellectual Property & Data Protection

KraftCodes adheres strictly to client confidentiality and data security standards. Client source code, proprietary algorithms, database records, and proprietary business logic remain the exclusive property of our clients according to our Master Services Agreements (MSAs).

We implement industry-standard administrative, physical, and technical controls—including encrypted transport layers (TLS/HTTPS), strict access credentials, static code analysis, and segregated environment topologies—to prevent unauthorized access, loss, or disclosure of data.

5. Data Sharing & Third Parties

KraftCodes does not sell, rent, or trade personal data or client intellectual property to third parties or data brokers.

We may share information only under the following limited circumstances:

• Infrastructure Providers: Trusted cloud hosting, DNS, deployment, and error-monitoring infrastructure providers (such as Vercel or PostgreSQL hosting providers) bound by equivalent confidentiality standards.
• Legal Obligations: Compliance with applicable laws, court orders, or lawful requests by regulatory authorities in Kenya, the United Kingdom, or applicable international jurisdictions.

6. Your Rights & Data Subject Requests

In compliance with the Kenya Data Protection Act (2019), General Data Protection Regulation (GDPR), and international privacy standards, you hold the following rights regarding your personal data:

• The right to request access to personal data held by KraftCodes.
• The right to request correction or updating of inaccurate data.
• The right to request erasure of personal data ("Right to be Forgotten") subject to statutory retention mandates.
• The right to object to or restrict processing of your personal information.

To exercise any of these rights, please contact our privacy representative at contact@kraftcodes.com.

7. Zero-Cookie Policy & Analytics

Our website (kraftcodes.com) operates with a strict zero-cookie policy. We do not set, deploy, or store tracking cookies, session identifiers, advertising cookies, or intrusive cross-site scripts in visitor browsers.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect technological advancements, operational changes, or legal requirements. Updated versions will be published directly to this page with an updated "Effective Date."

9. Contact Us

If you have questions, inquiries, or data protection requests concerning this Privacy Policy or our software engineering practices, please reach out to us at: