This Privacy Policy explains how Endpoint Logic Ltd ("Endpoint Logic", "we", "us", "our") collects, uses, stores, and shares personal information about individuals who visit our website at elt.co.ke, contact us, or engage us for services.
We are committed to protecting your personal information in accordance with the Kenya Data Protection Act 2019 and other applicable data protection law.
1. Who we are
Endpoint Logic Ltd is a company registered in Kenya, providing technology, business process outsourcing, and finance and accounting services.
Data controller contact:
Endpoint Logic Ltd
Ruiru, Kiambu County, Kenya
[email protected]
+254 716 421 028
2. Information we collect
2.1 Website visitors
When you visit elt.co.ke, our web server logs standard technical information including your IP address, browser type, operating system, referring URL, pages visited, and timestamps. This information is used for security monitoring and to understand how the site is used. It is not linked to any identified individual.
2.2 Contact form submissions
When you submit our contact form, we collect the information you provide: your name, email address, phone number (if given), company name (if given), the service you are enquiring about, and your message. We use this information to respond to your enquiry.
2.3 Email and telephone contact
When you email or call us directly, we collect the information contained in that communication. We keep records of these interactions to manage our client relationships.
2.4 Clients and service engagements
When we provide services to you or your organisation, we collect and process the personal information necessary to deliver those services. The type of information varies by service:
| Service | Personal information typically processed |
|---|---|
| IT Support | Employee names, email addresses, device details, user account information |
| Software / Web / Mobile Development | Contact details of key project stakeholders |
| Customer Service outsourcing | Your customers' contact details, enquiry content, and interaction history |
| Payroll | Employee names, ID numbers, KRA PINs, NHIF/NSSF numbers, bank account details, salary information |
| Bookkeeping / Accounting | Financial records and transactions, which may include personal details of directors, suppliers, and customers |
| Tax Filing | KRA PIN, income details, tax records, ID or passport number |
| Transcription | Audio or video recordings submitted for transcription, which may contain personal information about third parties |
3. How we use your information
We use personal information for the following purposes:
- Delivering services — to carry out the work you have engaged us for, including communicating with you, processing your data, and fulfilling our contractual obligations.
- Responding to enquiries — to reply to messages and calls from prospective clients.
- Statutory compliance — to meet our obligations under Kenyan law, including filing returns with KRA, NHIF, and NSSF on behalf of payroll clients.
- Security and fraud prevention — to protect our systems and detect and prevent unauthorised access or misuse.
- Improving our services — to understand how we can serve clients better, using aggregated and anonymised information.
We do not use personal information for automated decision-making or profiling. We do not sell personal information to any third party.
4. Legal basis for processing
We process personal information on the following legal bases:
- Contract performance — processing is necessary to perform our contractual obligations to you or to take steps at your request before entering into a contract.
- Legal obligation — where we are required to process information to comply with applicable law (for example, statutory filing obligations under the Kenya Revenue Authority).
- Legitimate interests — for security monitoring, responding to enquiries, and improving our services, where those interests are not overridden by your rights.
- Consent — where we have asked for and you have given your consent, for example through the consent checkbox on our contact form.
5. Who we share information with
We do not share personal information with third parties except in the following circumstances:
- Service delivery — we may use trusted sub-processors (for example, cloud hosting providers, accounting software providers) to help us deliver services. These processors are contractually bound to handle your information securely and only as instructed by us.
- Statutory bodies — we share information with KRA, NHIF, NSSF, and other government bodies as required by law when providing payroll and tax services.
- Professional advisors — we may share information with our lawyers, accountants, or insurers where necessary.
- Business transfer — if Endpoint Logic is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We would notify you before your information is transferred and becomes subject to a different privacy policy.
- Legal requirement — where we are required by a court order, regulator, or other lawful authority.
6. How long we keep your information
| Category | Retention period |
|---|---|
| Contact form and enquiry records | 2 years from last contact, or until the enquiry results in a client engagement |
| Client project files and correspondence | 7 years from end of engagement |
| Payroll and financial records | 7 years, as required by the Kenya Revenue Authority |
| Tax records | 7 years from the relevant tax year |
| Transcription files (audio/video) | Deleted or returned within 30 days of delivery of the transcript, unless otherwise agreed |
| Web server logs | 90 days |
7. How we protect your information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These include:
- HTTPS encryption for all web traffic
- Access controls limiting information to staff who need it
- Password policies and multi-factor authentication for internal systems
- Confidentiality obligations for all staff handling client data
- Prompt removal of access on end of employment or engagement
No transmission over the internet or electronic storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.
8. Your rights
Under the Kenya Data Protection Act 2019, you have the following rights in relation to your personal information:
- Right of access — to request a copy of the personal information we hold about you.
- Right to rectification — to ask us to correct inaccurate information.
- Right to erasure — to ask us to delete your information, subject to our legal retention obligations.
- Right to object — to object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of earlier processing.
- Right to lodge a complaint — to complain to the Office of the Data Protection Commissioner (ODPC) of Kenya if you believe your rights have been infringed.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
9. Cookies
This website does not use tracking cookies, analytics cookies, or third-party advertising cookies. We do not use Google Analytics or similar tracking services. The only technical cookies that may be set are those strictly necessary for the website to function (for example, session state on form submissions).
10. Links to other websites
Our website may contain links to other websites. This Privacy Policy applies only to elt.co.ke. We are not responsible for the privacy practices of other sites and encourage you to read their privacy policies.
11. Children
Our services are directed at businesses and adult individuals. We do not knowingly collect personal information from children under the age of 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your information, please contact us:
Endpoint Logic Ltd
Ruiru, Kiambu County, Kenya
[email protected]
+254 716 421 028