Privacy Policy

1. Introduction and data controller

Vorelix ("we", "us", "our") is the data controller responsible for personal data collected through this website. For any question about this policy or how your data is handled, you can reach us at [email protected]. This policy is written to comply with Kenya's Data Protection Act, 2019, and is overseen in relation to that law by the Office of the Data Protection Commissioner (ODPC).

2. What data we collect and how

We collect personal data in the following ways:

Data Category	Purpose	Legal Basis
Name, email, phone, message	Responding to enquiries submitted via the contact form	Consent
Cookie preferences	Remembering your consent choices and enabling core site functions	Consent / legitimate interest

3. Purposes and legal basis

We use the data described above only to respond to enquiries, deliver the services requested, and operate the website itself. Where we rely on consent, such as for optional cookies, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data sharing and third parties

We do not sell personal data. We do not share the contents of contact form submissions with third parties except where required to fulfil the service you have requested or where required by Kenyan law.

5. Retention

We retain enquiry data only for as long as needed to respond to your message and, where an engagement follows, for the duration of that engagement plus a reasonable period afterward for record-keeping purposes.

6. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse or unauthorised access, appropriate to the modest scale of data we handle.

7. International transfers

We do not routinely transfer personal data outside Kenya. Should this change, any transfer would be carried out in accordance with the safeguards required under the Data Protection Act, 2019.

8. Your rights

Under the Data Protection Act, 2019, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion, object to certain processing, and lodge a complaint with the Office of the Data Protection Commissioner. To exercise any of these rights, please contact us using the details above.

9. Opt-out and data deletion

Providing personal data through this site is always optional. You can decline to submit the contact form, and you can disable non-essential cookies at any time through the cookie preferences panel available on the Cookie Policy page or via the "Cookie Settings" link in the footer. To request deletion of any data we hold about you, please reach out through the contact page.