Last updated: September 16, 2026
CodeClean (“we,” “us,” “our”) operates codeclean.co.ke. This policy explains what personal data we collect when you use this website, why we collect it, and how we handle it, in line with Kenya’s Data Protection Act, 2019.
Who we are
CodeClean is a web design and digital marketing studio based in Dagoretti, Nairobi, Kenya. For any question about this policy or your data, contact us at information@codeclean.co.ke or +254 700 673 933.
What we collect
We only collect what you give us directly, through:
- The contact form — name, email, service of interest, subject, and message.
- The Free SEO Audit tool — your website URL, name, email, and (optional) phone number.
- The Compare vs Competitor tool — your website URL, a competitor’s URL, name, email, and (optional) phone number.
- The newsletter signup — your email address.
We do not ask for payment card details through this website. Payments for projects are arranged directly with you via M-Pesa, bank transfer, or Pesapal invoicing, outside this site.
We also collect limited technical data automatically — browser type, device type, pages visited, and approximate location from IP address — through standard analytics, to understand how visitors use the site.
Why we collect it
- To respond to enquiries and quote on projects.
- To run the SEO audit or competitor comparison you requested and send you the results.
- To follow up by email, phone, or WhatsApp about a service you asked about.
- To send newsletter updates, only if you signed up for them.
- To understand and improve how this website performs.
We do not sell, rent, or trade your personal data to third parties.
Legal basis
We process your data on the basis of your consent (submitting a form is your consent to be contacted about it) and, where we’re delivering a service you’ve engaged us for, to perform that contract.
Who we share it with
We may share data with:
- Service providers we rely on to run the site and business — our hosting provider, email delivery service, and analytics provider.
- Payment processors (M-Pesa, Pesapal) only for the specific transaction you make with us.
We do not share your data with anyone else, and we never sell it.
How long we keep it
- Enquiry and audit-tool submissions: up to 24 months, or until you ask us to delete them, whichever is sooner.
- Client project data (contracts, invoices, deliverables): for as long as required for accounting and legal purposes under Kenyan law, typically 7 years.
- Newsletter emails: until you unsubscribe.
Cookies
This site uses cookies for basic analytics (to see how visitors use the site) and to remember form-spam protections. You can disable cookies in your browser at any time; the site will still work, though some features may behave differently.
Your rights
Under the Data Protection Act, 2019, you can ask us to:
- Confirm what personal data we hold about you.
- Correct inaccurate data.
- Delete your data (“right to be forgotten”), except where we’re required to keep it (e.g. invoices).
- Withdraw consent to marketing emails at any time — every newsletter includes an unsubscribe link, or email us directly.
To exercise any of these, email information@codeclean.co.ke. We’ll respond within 30 days.
Security
We take reasonable technical and organisational measures to protect your data against loss, misuse, or unauthorised access. No online system is completely secure, so we can’t guarantee absolute security, but we don’t store payment details on this site and limit access to enquiry data to the two of us.
Children
This site and our services are intended for businesses and adults. We do not knowingly collect data from anyone under 18.
Changes to this policy
We may update this policy as the business or the law changes. The date at the top will always show the latest revision. Material changes will be reflected here; we won’t email you about every minor update.
Contact / complaints
If you have concerns about how we handle your data, contact us first at information@codeclean.co.ke. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.