Privacy & Personal Data
Privacy Policy
This notice is structured with Kenya’s Data Protection Act, 2019 and applicable data protection regulations in mind.
1. Who is responsible for your personal data?
For personal data collected through this website and Larktech’s own service and enquiry processes, Larktech Ventures Limited acts as the organisation that determines why and how that information is used. You can contact Larktech through the Contact page or by telephone on +254 703 354 677 if you have a privacy question or want to exercise a data protection right.
2. What personal data may we collect?
Depending on how you use the website, Larktech may collect information such as your name, telephone number, email address, preferred contact method, facility or organisation name, location or service context, enquiry subject and message. A technical service request may also include equipment type, brand, model, serial number, fault symptoms, urgency or safety information and photographs you choose to upload. Maintenance programme enquiries may include facility and equipment information needed to understand the proposed service scope. The website may also process limited technical information generated by normal web requests and security logs, such as IP address, browser or device information, timestamps and requested pages. Please do not submit sensitive personal information unless Larktech has specifically requested it and it is necessary for the relevant service.
3. Why do we use personal data?
Larktech may use personal data to receive and respond to enquiries; assess technical service requests; communicate about inspections, diagnostics, repairs, maintenance, installations or relocations; prepare quotations or other commercial responses; manage service follow-up and documentation; maintain appropriate business and service records; protect the website and systems from misuse; troubleshoot technical problems; comply with legal, regulatory, accounting or dispute-resolution obligations; and improve the effectiveness of our service processes. Information collected for one purpose should not be reused for an incompatible purpose without an appropriate legal basis.
4. What is our legal basis for processing?
The applicable legal basis depends on the activity. Processing may be necessary because you have asked Larktech to take steps before entering into a service arrangement or to perform an agreed service; because you have given consent for a specific purpose; because Larktech has a legitimate business interest that does not override your rights and freedoms, such as responding to business enquiries, maintaining service records or protecting systems; or because processing is necessary to comply with a legal obligation. Where processing relies on consent, you may withdraw that consent, although withdrawal does not make earlier lawful processing invalid.
5. Who may receive personal data?
Access to personal data should be limited to Larktech personnel and authorised service providers who need it for the relevant purpose. Larktech may use providers that support hosting, infrastructure, communications, storage, security, professional advice or other operational functions. Information may also be disclosed where required by law, a competent authority or a legitimate legal process. Larktech does not sell personal data to advertisers. Where a service provider processes personal data on Larktech’s behalf, appropriate contractual and organisational safeguards should be used.
6. How long do we keep personal data?
Personal data should be retained only for as long as it is reasonably needed for the purpose for which it was collected and for any legitimate service-history, contractual, accounting, legal, security or dispute-resolution requirement. Different records may therefore have different retention periods. When identifiable personal data is no longer required, it should be deleted, anonymised or otherwise handled in accordance with Larktech’s applicable retention and disposal procedures.
7. How do we protect personal data?
Larktech uses reasonable technical and organisational measures intended to reduce the risk of unauthorised access, loss, misuse, alteration or disclosure of personal data. Measures may include access controls, application and server security, controlled file storage, validation, authentication, backups and operational safeguards appropriate to the nature of the information and the systems in use. No website, network or storage system can be guaranteed to be completely secure, so security measures are reviewed and improved as risks and technology change.
8. Personal data outside Kenya
Some technology or service providers may operate infrastructure outside Kenya. Where personal data is transferred outside Kenya, Larktech should ensure that the transfer is permitted under applicable law and supported by an appropriate legal basis and data protection safeguards. Sensitive personal data should receive any additional protection required by law. Larktech should not represent an overseas transfer as protected merely because a service provider is reputable; the legal transfer requirements must also be considered.
9. Your data protection rights
Subject to applicable law and any lawful limitations, you may ask to be informed about how your personal data is used; request access to personal data held about you; request correction of inaccurate or misleading information; object to certain processing; request deletion or erasure where appropriate; request restriction of processing where applicable; request data portability where the legal requirements are met; and withdraw consent where consent is the basis for processing. Larktech may need to verify your identity before acting on a request so that personal information is not disclosed to the wrong person.
10. Cookies and essential website technology
This Laravel website may use strictly necessary session and security technologies that support functions such as forms, CSRF protection, session handling and website security. Larktech should not introduce non-essential advertising, behavioural or analytics cookies without first reviewing the privacy impact and implementing any notice or consent controls required by law. If the website’s cookie use changes materially, this Privacy Policy should be updated.
11. Children’s personal data
The public website and Larktech’s commercial equipment-service workflows are not designed to intentionally collect personal data directly from children. If Larktech becomes aware that personal data concerning a child has been submitted without an appropriate lawful basis or required authority, the information should be reviewed and handled in accordance with applicable law.
12. Automated decisions
The current public website workflows are intended to route enquiries and service information to people for review. Larktech does not currently describe these website forms as making solely automated decisions that produce legal or similarly significant effects on users. If automated decision-making of that nature is introduced later, the privacy notice and related controls should be reviewed before deployment.
13. Changes to this Privacy Policy
Larktech may update this Privacy Policy when the website, service processes, technology, service providers or legal requirements change. The effective date should be updated when a material revision is published. Previous business records remain subject to the legal and operational requirements applicable to their processing.
14. How to contact Larktech about privacy
For a privacy request or question, use the Contact page at /contact or call Larktech Ventures Limited on +254 703 354 677. When making a request, provide enough information for Larktech to identify the relevant record and understand what you are asking for, but do not send unnecessary sensitive information.
Contact Larktech →15. Complaints and the Data Protection Commissioner
If you have a concern about how Larktech handles your personal data, you should first give Larktech an opportunity to review the concern. You also have the right to raise a complaint with Kenya’s Office of the Data Protection Commissioner where appropriate. The Office of the Data Protection Commissioner is the independent regulator established under the Data Protection Act to oversee personal data protection in Kenya.
Office of the Data Protection Commissioner ↗The policy must change when the data practices change.
New analytics, payment integrations, marketing tools, customer portals or other major data-processing features should be reviewed before deployment so this notice remains accurate.