Privacy Policy

This Privacy Policy explains how Savanna Sync (“Savanna Sync”, “we”, “us” or “our”) collects, uses and protects personal data when you visit savannasync.com (the “Site”), join our waitlist, or contact us. Savanna Sync is based in Nairobi, Kenya. For the purposes of the Kenya Data Protection Act, 2019 (the “DPA”), Savanna Sync is the data controller for this Site.

This policy covers the marketing website only. The Savanna Sync application — the product you sign in to — is governed by a separate privacy notice provided within the app.

Information we collect

• Waitlist & enquiries. When you join the waitlist, request a demo, or contact us, we collect your email address and, if you provide them, yourname and anything else you choose to include in a message to us (for example a phone number or your company).
• How you found us. With a waitlist signup we may record where it came from and marketing-attribution parameters (utm_source, utm_medium, utm_campaign), so we can understand which channels bring people to Savanna Sync.
• Usage & analytics. We use Google Analytics 4, configured to anonymise IP addresses, to understand how the Site is used — for example pages viewed, device and browser type, approximate location and referring source. This is collected using cookies and similar technologies.
• Technical data. Our hosting provider processes standard server information (such as IP address and request timestamps) to deliver and secure the Site.

How we use your information

• To respond to your enquiries and provide demos, trials and waitlist access.
• To let you know when Savanna Sync is available and send information you have asked for. You can opt out of these messages at any time.
• To operate, secure, maintain and improve the Site.
• To measure and improve our marketing, using analytics in aggregate.
• To comply with our legal obligations.

Under the DPA we rely on the following bases: your consent (for waitlist signup and marketing messages), taking steps at your request before entering a contract, our legitimate interests in running and improving the Site, andcompliance with the law. We do not sell your personal data.

Cookies & analytics

The Site uses a small number of cookies and similar technologies, mainly for analytics (Google Analytics 4, set to anonymise IP addresses). You can control or delete cookies in your browser settings, and you can opt out of Google Analytics using Google’sopt-out browser add-on.

Who we share it with

We do not sell your personal data. We share it only with service providers that help us run the Site and our business, and only as needed:

• Hosting & infrastructure — our website host and content-delivery network, which also runs the form that receives waitlist signups.
• Database — a managed database provider where waitlist and enquiry records are stored.
• Analytics — Google Analytics, as described above.

We may also disclose information where required by law, to protect our rights or safety, or in connection with a business sale or reorganisation. We require our providers to protect your data and to use it only to provide services to us.

International transfers

Some of our service providers store or process data outside Kenya. Where personal data is transferred out of Kenya, we take steps to keep it protected in line with the DPA, including relying on providers that offer appropriate safeguards.

How long we keep it

We keep waitlist and enquiry data for as long as it is needed for the purposes above — for example until Savanna Sync launches and we have contacted you, or until you ask us to delete it — and then delete or anonymise it.

Security

We use reasonable technical and organisational measures to protect your personal data. No method of transmission over the internet or of storage is completely secure, so we cannot guarantee absolute security.

Your rights

Under the DPA you have the right to:

• be informed about how your data is used;
• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, or its use restricted, in certain circumstances;
• object to processing, and to withdraw consent at any time; and
• lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any of these, email hello@savannasync.com. Withdrawing consent does not affect processing we carried out before you withdrew it.

Children

The Site is intended for businesses and for people aged 18 and over. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it last changed; where changes are significant, we will take reasonable steps to let you know.

Contact

Questions or requests about this policy or your data? Emailhello@savannasync.com, or reach us onWhatsApp at +254 716 694 890. You can also contact the ODPC at odpc.go.ke.