Privacy Policy for PolishExposez
Effective Date: April 21, 2025

At PolishExposez (https://polishexposez.com/), we are committed to protecting the privacy and personal data of our users. This Privacy Policy outlines how we collect, use, store, and protect your personal information in compliance with the Kenya Data Protection Act, 2019 and other applicable laws. By accessing or using our website, you agree to the practices described in this policy.

1. Data Controller
The data controller responsible for your personal data is:

PolishExposez
Email: [Insert Contact Email]
Address: [Insert Physical Address, if applicable]

For any inquiries regarding your personal data, please contact us at the email address provided above.

2. Information We Collect
We may collect and process the following types of personal data, as defined under the Kenya Data Protection Act, 2019:

Personal Information Provided by You: This includes data such as your name, email address, or other contact details when you submit inquiries, comments, or subscribe to our newsletter (if applicable).
Automatically Collected Information: We may collect technical data, such as your IP address, browser type, device information, and browsing behavior (e.g., pages visited, time spent on the site) through cookies and similar technologies.
Third-Party Data: If you interact with our website through social media plugins or external links, we may receive limited data from those third-party services, subject to their privacy policies.
3. Purpose of Data Processing
We process your personal data for the following lawful purposes, in line with Section 25 of the Kenya Data Protection Act, 2019:

To Provide and Improve Our Services: To deliver content, respond to inquiries, and enhance the functionality and user experience of our website.
Communication: To send you updates, newsletters, or responses to your inquiries, where you have provided consent or where we have a legitimate interest.
Analytics: To analyze website usage and performance, enabling us to optimize content and improve user engagement.
Legal Compliance: To comply with legal obligations under Kenyan law or to protect our rights and interests.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds, as required by the Kenya Data Protection Act, 2019:

Consent: Where you have explicitly consented to the processing of your personal data (e.g., subscribing to a newsletter).
Legitimate Interest: Where processing is necessary for our legitimate interests, such as improving our website or ensuring its security, provided your rights and freedoms are not overridden.
Legal Obligation: Where processing is required to comply with Kenyan laws or regulations.
Contractual Necessity: Where processing is necessary to fulfill a contract with you (if applicable).
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience and collect analytical data. Cookies are small text files stored on your device. We use:

Essential Cookies: Necessary for the website to function properly.
Analytical Cookies: To understand how users interact with our website.
Third-Party Cookies: From external services (e.g., Google Analytics, social media plugins), subject to their privacy policies.
You can manage cookie preferences through your browser settings. By continuing to use our website, you consent to the use of essential cookies. For non-essential cookies, we will seek your explicit consent in accordance with the Kenya Data Protection Act, 2019.

6. Data Sharing and Transfers
We may share your personal data with:

Service Providers: Third-party vendors (e.g., hosting providers, analytics tools) who process data on our behalf, under strict data processing agreements compliant with Kenyan law.
Legal Authorities: When required by law or to protect our rights, safety, or property.
If your data is transferred outside Kenya, we ensure that the recipient country or organization provides an adequate level of data protection, as required by Section 48 of the Kenya Data Protection Act, 2019, or that appropriate safeguards (e.g., standard contractual clauses) are in place.

7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. For example:

Contact information provided for inquiries will be retained until the inquiry is resolved, unless further retention is consented to or required by law.
Analytical data (e.g., anonymized usage statistics) may be retained indefinitely for ongoing website improvement.
Once the retention period expires, your data will be securely deleted or anonymized.

8. Your Data Protection Rights
Under the Kenya Data Protection Act, 2019 (Sections 26–32), you have the following rights regarding your personal data:

Right to Be Informed: To know how your data is being processed.
Right of Access: To request a copy of your personal data.
Right to Rectification: To correct inaccurate or incomplete data.
Right to Erasure: To request deletion of your data, subject to legal limitations.
Right to Restrict Processing: To limit how your data is processed.
Right to Data Portability: To receive your data in a structured, machine-readable format.
Right to Object: To object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: To withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, please contact us at [Insert Contact Email]. We will respond to your request within 30 days, as required by Kenyan law. You may also lodge a complaint with the Office of the Data Protection Commissioner in Kenya if you believe your rights have been violated.

9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit (e.g., SSL/TLS).
Regular security assessments and updates.
Access controls to limit data access to authorized personnel only.
Despite these measures, no online system is completely secure. In the event of a data breach, we will notify the Office of the Data Protection Commissioner and affected users within 72 hours, as required by Section 43 of the Kenya Data Protection Act, 2019.

10. Third-Party Links
Our website may contain links to third-party websites or services (e.g., social media platforms). These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies before interacting with them.

11. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised Effective Date. Significant changes will be communicated via a prominent notice on our website or by direct notification, where required by law.

12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [Insert Contact Email]
Address: [Insert Physical Address, if applicable]

We are committed to addressing your concerns promptly and transparently.