01
Who we are
Zen Avenue is a Kenyan registered business name operating as a sole proprietorship. We provide websites and practical digital solutions for businesses. Our website is zenavenue.co.ke.
Zen Avenue is responsible for how information supplied through its own business enquiries is used. This policy concerns our website and our own business communications. Client websites and services may have their own privacy notices and agreed responsibilities.
For privacy questions, email privacy@zenavenue.co.ke. Messages to this address forward to our business mailbox, info@zenavenue.co.ke.
02
Information we receive
For an enquiry, we ask for your full name, email address and project message. You may also provide a phone or WhatsApp number, the service you are interested in and your preferred contact method. We also receive information you choose to share in subsequent business correspondence.
A phone number is required if you choose phone or WhatsApp contact. Without the required information, we cannot accept a form enquiry. Please include only what we need to understand your business request. Do not send passwords, financial account details, patient records or other confidential information through the enquiry form.
03
Website and business-card QR enquiries
A QR code on a business card may take you to our website or enquiry page. Scanning the code does not itself subscribe you to marketing. If you choose to send an enquiry, the same information and purposes described in this policy apply.
The intake system records the enquiry, its reference and receipt time, the selected service, an allowlisted source-page path and the notice version supplied with the request. A retry identifier helps avoid storing the same submission twice. Source-page context helps us understand your request; it is not a claim that we track an individual’s QR scans.
An accepted enquiry means it has been stored for follow-up. It does not mean an email notification was delivered or that someone has already reviewed it.
04
How we use information
- Understand and respond to your enquiry and discuss a suitable next step.
- Prepare and manage an agreed service or business relationship.
- Keep relevant correspondence and records of our discussions.
- Protect the enquiry system against abuse and manage duplicate submissions.
- Handle privacy requests, disputes and applicable legal obligations.
Depending on the circumstances, processing may be necessary to take steps you request before a contract, perform an agreement, meet a legal obligation or pursue legitimate business interests while respecting your rights. Where consent is needed for a separate purpose, it must be requested separately. Sending an enquiry is not blanket consent for unrelated uses.
05
Your contact preferences
Email is the default contact method. If you choose WhatsApp or phone and provide a valid number, we use that preference to guide our response to your enquiry. You can ask us to change it.
Choosing WhatsApp is not consent to WhatsApp marketing, an automated messaging service or a mailing list. Enquiries do not automatically subscribe you to promotional messages. If you communicate with us through a third-party messaging service, that provider also handles information under its own terms and privacy policy.
06
Providers and international processing
Operating a website and receiving correspondence involves hosting, infrastructure and email providers. Information may also need to be disclosed where required by law or to handle a legal claim. We do not treat an enquiry as permission to sell your contact details.
The intended initial Contact backend uses a Zen Avenue-managed server on Oracle Cloud and a SQLite enquiry database. Human follow-up is intended to work independently of email notification success. AWS SES in the Europe (Stockholm) region is a separately planned notification provider; it is not activated for this Contact system. n8n is not part of the initial notification path.
Hosting and communication providers may process information outside Kenya. The actual production processing locations, provider arrangements and any required international-transfer safeguards remain under review. This policy does not claim that those safeguards or data processing agreements have been verified. We will update these disclosures as the operational arrangements are confirmed.
07
Cookies, analytics and technical information
The current website code contains no analytics tracker or advertising cookie implementation. Fonts and brand assets are served locally. This source-code review does not verify the configuration of every live hosting or network service, and we do not claim a completed live-site cookie audit.
Online enquiry sending is currently unavailable. The website does not save enquiry fields in browser storage.
The intake application uses the connection’s IP address for temporary rate-limit counters and is designed to avoid logging enquiry content. Website and network requests also involve technical information such as IP addresses, requested paths and response details. Actual production proxy logging, access and retention settings still need verification. If analytics or additional cookies are introduced, we will update this policy and obtain any required permissions.
08
Security
The implemented intake application validates submissions, limits request sizes and submission rates, and stores accepted enquiries transactionally. Its design restricts lead retrieval to a protected administrative tool rather than a public lead-listing endpoint. Production HTTPS, access permissions and runtime settings still require verification before activation.
No system can guarantee absolute security or recovery. We do not claim a security certification or verified backup coverage. A permanent loss of the hosting server could result in unrecoverable enquiry data loss. Please keep your own copy of important correspondence.
09
How long we keep information
Our enquiry retention target is 24 months after the last meaningful interaction, subject to applicable legal obligations and exceptions such as an ongoing service relationship, dispute or legal claim. The operational definition of a meaningful interaction and how it is recorded still need to be finalized; routine technical retries are not intended to restart this period.
This is a retention target, not a claim that automated deletion is running. Recording the relevant interaction date, reviewing exceptions and carrying out deletion require operational procedures that remain to be finalized and audited. Service, contractual and legal records may need a different retention period. You may contact us to ask about information held about you or request deletion.
10
Your rights and requests
Under applicable Kenyan data protection law, you have rights concerning your personal information, including being informed about its use, requesting access, correcting inaccurate information and objecting to processing. You can also request deletion where applicable. These rights are subject to the relevant legal conditions and exceptions.
Email privacy@zenavenue.co.ke with a description of your request and enough information to locate the relevant correspondence. We may need to verify your identity proportionately before disclosing or changing information. Do not send identity documents or sensitive records unless a suitable method has been agreed. If a request cannot be fulfilled, we will explain the reason.
You can raise a concern with Kenya’s Office of the Data Protection Commissioner. This policy does not claim ODPC registration or completed external legal review.
11
Changes to this policy
We may update this policy when our services, processing arrangements or legal requirements change. The date above identifies the latest version. Material changes will be explained here, with additional notice or permission where required.