Legal
Last updated: August 2026. This Privacy Policy describes how Corvalis Digital Hub collects, uses, and protects your personal information.
Corvalis Digital Hub ("we", "us", "our") provides web and mobile app development, graphic design, Amazon KDP publishing, SEO, and related digital services. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, contact us, or engage us for a project. By using this site or our services, you agree to the practices described here.
We collect information you provide directly, such as your name, email address, phone/WhatsApp number, company name, and project details submitted through our contact or quote forms. If you engage us for a paid project, we may also collect billing details, payment confirmation references (e.g. M-Pesa transaction codes), and any content, assets, or credentials you share so we can complete the work. We also collect limited technical data automatically, such as your IP address, browser type, device type, and pages visited, via standard web analytics.
We use your information to respond to enquiries and quote requests, deliver and manage contracted services (development, design, publishing, SEO), process payments and issue invoices, communicate about project progress and support, and improve our website and service offerings. We do not use your personal information for automated decision-making that produces legal or similarly significant effects.
Where the Kenya Data Protection Act, 2019 applies, we process personal data on the basis of your consent (e.g. submitting a contact form), performance of a contract (e.g. delivering a paid project), and our legitimate business interests in operating and improving our services, balanced against your rights.
Our website may use cookies and similar technologies for basic site functionality and analytics. See our separate Cookie Policy for full details on what we use and how you can manage your preferences.
We do not sell your personal information. We may share necessary information with trusted third-party service providers who support our operations, including hosting and infrastructure providers (e.g. Vercel, Supabase), form and email delivery services (e.g. Formspree), payment processors (e.g. M-Pesa, card processors), and analytics providers. These providers only receive the information needed to perform their function and are expected to safeguard it. We may also disclose information where required by Kenyan law or to protect our legal rights.
We do not directly store full card details. Payments are processed through third-party payment providers (such as M-Pesa or card payment gateways), and any card or mobile-money data is handled by those providers under their own security and privacy standards.
We retain personal and project-related information only for as long as necessary to deliver services, meet legal, accounting, or tax obligations, and resolve any disputes. Project files and communications may be retained for a reasonable period after project completion to support future revisions or maintenance requests, unless you ask us to delete them sooner.
We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction, including secure hosting, access controls, and limiting data collection to what is necessary. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
Subject to applicable law, you have the right to request access to the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal or contractual retention needs), and object to or restrict certain processing. To exercise any of these rights, contact us using the details below.
Our services are intended for businesses and individuals capable of entering into a binding agreement. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us so we can remove it.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date below indicates the most recent revision. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or how your data is handled, contact us at info@corvalisdigitalhub.com.
