REF: 001 / LEGAL
Privacy Policy
Last updated: 12 August 2026
1. Introduction and data controller
This policy explains how Galveris ("we", "us"), registered at Kimathi Street 76, Nairobi 00200, Kenya, collects and handles personal data when you use this website. Galveris is the data controller for the purposes of Kenya's Data Protection Act, 2019. Questions about this policy can be sent to [email protected].
2. What data we collect and how
We collect information you provide directly through our contact form — your name, email address, phone number, and any message content. We also use browser-based storage (cookies and localStorage) to remember your consent preferences and support basic site functionality, as set out in our Cookie Policy.
3. Purposes and legal basis
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact form details | Responding to enquiries and arranging sessions | Consent / contractual necessity |
| Cookie preferences | Remembering your consent choices | Legitimate interest / consent |
| Optional analytics data | Understanding site usage, only if consented | Consent |
4. Data sharing and third parties
We do not sell personal data. Information you submit is used solely by Galveris to respond to your enquiry. We do not share form submissions with external advertisers or data brokers.
5. Retention
Contact form submissions are retained only as long as needed to respond to your enquiry and, where a training relationship follows, for the duration of that relationship plus a reasonable administrative period. Cookie preference data remains in your browser's local storage until you clear it or change your choice.
6. Security
We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse, consistent with the standards expected under the Data Protection Act.
7. International transfers
We do not routinely transfer personal data outside Kenya. Should this change, any transfer would be carried out in accordance with the safeguards required by the Data Protection Act.
8. Your rights
Under Kenya's Data Protection Act, you have the right to access, correct, or request deletion of your personal data, to object to certain processing, and to lodge a complaint with the Office of the Data Protection Commissioner. To exercise any of these rights, contact us via the contact page.
9. Opt-out and data deletion
Providing your data through our contact form is entirely optional. You may decline non-essential cookies at any time through the cookie preferences panel, and you may request deletion of any data you have submitted by reaching out through the contact page.