Home Articles Tools About Contact

Privacy Policy

Last updated: 16-09-2026

1. Who We Are

Biashara Guide is published by Asali Labs, a Kenyan digital products studio. We operate the website at biasharaguide.co.ke. For any privacy matter, contact us at hello@biasharaguide.com.

2. What We Collect

We are designed to collect as little as possible. Specifically:

  • Newsletter email: If you subscribe, we receive your email address. That is the only personal data we store about subscribers.
  • Contact messages: Our contact form opens your own email client with a pre-filled message — we do not store, process, or see the message until it arrives in our inbox as ordinary email.
  • Local storage: Your browser stores your theme preference and checklist progress locally on your device. This data never leaves your browser.
  • Technical logs: Our hosting provider (Cloudflare Pages) processes standard technical data (IP address, browser type, pages visited) to operate and secure the site. We do not use this data to identify you.
  • Newsletter protection: Subscription requests are checked by a short-lived rate limit keyed to the IP address supplied by Cloudflare. The application does not persist that key as a subscriber record.
  • Security reports: Browsers may send bounded Content Security Policy reports to our reporting endpoint when the site observes a policy violation. The application does not store the report body.
  • Analytics: Google Analytics 4 (GA4) records pseudonymous usage information such as page views, approximate location, browser and device type, referring source, scrolls, outbound clicks, and file downloads. GA4 uses first-party cookies and Google processes this information for us. Cloudflare Web Analytics may collect aggregated page-performance measurements, such as load timing and Core Web Vitals, through its privacy-focused beacon. We do not send newsletter email addresses or message contents as analytics events.

3. How We Use Your Information

  • To send you new-guide notifications — only if you subscribe (you can unsubscribe with one click at any time)
  • To operate, secure, and improve the site
  • To respond to inquiries you send us

We never sell, rent, or trade your personal information. We do not use it for advertising.

4. Legal Basis

Under the Kenya Data Protection Act, 2019, we process newsletter data on the basis of your consent (which you can withdraw at any time by unsubscribing), and analytics plus technical/security data on the basis of legitimate interest in understanding and improving site use and operating the site securely. Where applicable law requires consent for analytics cookies, we will honour those requirements.

5. Data Processors

We use the following processors, each bound by their own data protection obligations:

  • MailerLite — hosts our subscriber list and sends newsletter emails
  • Cloudflare — hosts the site and provides security/performance infrastructure
  • Google — processes GA4 website measurement data (page views, browser and device details, approximate location, and interaction events)

6. Data Retention

Subscriber emails are kept only while the subscription is active. When you unsubscribe, your email is removed from our active list. Technical logs are retained by our hosting provider in line with their standard policies. GA4 data is retained according to the configured Google Analytics retention setting; aggregated Cloudflare Web Analytics data follows Cloudflare's retention policy. Local storage data is deleted when you clear your browser data or uninstall.

7. Cookies and Local Storage

GA4 uses first-party analytics cookies to distinguish sessions and understand site use. Cloudflare Web Analytics uses a privacy-focused performance beacon and does not use tracking cookies for cross-site advertising. You can block or delete analytics cookies through your browser settings. We use local storage for theme preference and checklist progress — this stays on your device and is not transmitted to us or any third party.

8. Your Rights

Under section 26 of the Kenya Data Protection Act, 2019, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing
  • Request data portability (where applicable)
  • Withdraw consent at any time (e.g., unsubscribe)
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any of these rights, email hello@biasharaguide.com and we will respond within the timelines set by the Act.

9. Security

We serve the site over HTTPS, use access-restricted tooling for any account management, and hold the minimum possible personal data. No financial data, passwords, or account systems are stored on the site.

10. Data Breaches

If a breach affecting personal data occurs, we will notify the ODPC within 72 hours of becoming aware, as required by the Data Protection Act, 2019, and notify affected individuals without undue delay.

11. Changes to This Policy

We may update this policy as the site or the law evolves. Changes will be posted on this page with the updated date. Significant changes affecting your rights will be flagged in our newsletter.

12. Contact

Privacy inquiries: hello@biasharaguide.com
Regulator: Office of the Data Protection Commissioner — odpc.go.ke