Privacy, terms and data protection.

01

Privacy policy

This policy explains what personal data Halisi Softworks collects, why we collect it, and what we do with it. It applies to this website and to the professional services we provide.

What we collect

• Information you give us. Your name, email address, phone number, company name and the details of your enquiry when you contact us or submit a form.
• Information from our services. Where we operate or maintain a system on your behalf, we may process data held in that system strictly as your data processor, under a written agreement.
• Technical information. Basic, aggregated analytics about how this website is used, such as pages viewed, approximate location by country, and device type. We do not use this to identify individuals.

Why we collect it

• To respond to your enquiry and prepare a proposal.
• To deliver, support and maintain the systems we build for you.
• To meet our legal, tax and contractual obligations.
• To improve this website and the clarity of what we publish.

What we do not do

We do not sell your data. We do not share it with third parties for their own marketing. We do not add you to a mailing list because you asked us a question.

How long we keep it

Enquiry records are kept for up to twenty four months so we can pick up a conversation where it left off. Client project records are kept for the duration of the engagement plus seven years, as required for tax and statutory record keeping. Data we process on a client's behalf is returned or securely deleted at the end of the engagement, on the client's written instruction.

Your rights

Under the Data Protection Act, 2019 you have the right to be informed about how your data is used, to access the data we hold about you, to have inaccurate data corrected, to object to processing, to request deletion, and to lodge a complaint with the Office of the Data Protection Commissioner. To exercise any of these, write to privacy@halisisoftworks.co.ke. We respond within thirty days.

Cookies

This website uses only the cookies and local storage needed to remember your display preference, such as light or dark mode. Analytics, where enabled, is configured without cross-site tracking. No advertising cookies are set.

02

Data protection statement

Most of the systems we build hold data that matters: member savings records, patient files, payroll, school fees. Our obligations there go well beyond this website.

Our commitments

• Lawful basis. We process personal data only on your documented instruction and only for the purposes of the engagement.
• Encryption. Data is encrypted in transit using TLS and at rest using industry standard encryption on the storage layer.
• Access control. Access follows the principle of least privilege. Production access is limited to named engineers, logged, and revoked at the end of an engagement or a staff departure.
• Data residency. Where a client requires data to remain in Kenya, we deploy to local or regional infrastructure and confirm the hosting region in writing.
• Sub processors. We disclose every sub processor in the data processing agreement and give notice before adding a new one.
• Breach notification. If we become aware of a personal data breach affecting your data, we notify you without undue delay and within seventy two hours, with what we know and what we are doing about it.
• Return and deletion. At the end of an engagement you receive a full export in an open format, and we delete our copies on your written confirmation.

Payments

We do not store card data. Payment integrations, including M-Pesa and bank and card gateways, are implemented against the provider's official APIs, with credentials held in a managed secret store and never in application source code.

Reporting a vulnerability

If you believe you have found a security issue in a system we built, write to security@halisisoftworks.co.ke. We acknowledge reports within two business days and will not pursue action against good faith research.

03

Terms of service

These terms cover use of this website. Client engagements are governed by the signed proposal, statement of work and master services agreement, which take precedence over anything on this page.

Use of this website

You may read, print and share the content of this site for your own reference. You may not copy our written content, designs or code for commercial reuse without written permission, or attempt to disrupt, probe or gain unauthorised access to the site or its infrastructure.

What this site is not

Descriptions of products and capabilities on this site are indications of what we build, not offers of sale or guarantees of a specific outcome. Any indicative pricing is a starting range only. Nothing here constitutes technical, legal, financial or regulatory advice, and case studies marked as illustrative are composites, not accounts of a named client.

Intellectual property

The Halisi Softworks name, mark and site content remain our property. Ownership of work produced in a client engagement is set out in that engagement's agreement. Our default position is that the client owns the delivered application code and all of their data, and we retain rights to our own pre existing tools, libraries and internal frameworks.

Third party links

Where we link to another organisation's site, we do not control its content or its privacy practices, and we are not responsible for them.

Liability

This website is provided as is. To the extent permitted by law, we are not liable for indirect or consequential loss arising from your use of it. Liability under a client engagement is capped and defined in that engagement's agreement.

Changes

We may update these terms and the policies on this page. Material changes affecting an active client engagement are communicated directly, not by silent edit. The date at the top of this page reflects the current version.

Governing law

These terms are governed by the laws of Kenya, and the courts of Kenya have exclusive jurisdiction over any dispute arising from them.

04

Company details

Registered name

Halisi Softworks Limited

Registration number

To be confirmed

KRA PIN

Available on request

Registered office

To be confirmed, Nairobi

Data protection contact

privacy@halisisoftworks.co.ke

General enquiries

hello@halisisoftworks.co.ke

Before this page goes live, confirm the registration number, ODPC registration status and physical address with your company secretary. These policies are a sound starting position; have them reviewed by a Kenyan advocate before publication.