Aeltara

Notice

Draft under legal review — content may change.

Legal

Privacy Policy

Effective 2026-04-29

1. Who we are

Aeltara operates the platform marketing site at aeltara.com. Aeltara is the data controller for personal data collected through this site.

ODPC registration pending — reference available on request.

2. What we collect

We collect two categories of personal data on this site:

  • Contact data — name, email, project name, and any free-text message you provide on the contact form.
  • Behavioural data — page paths, UTM parameters, an IP-derived hash that rotates daily, and a record of WhatsApp click events. We do not store the raw IP address.

3. Why we collect it

Under section 30 of the Kenya Data Protection Act 2019, our lawful bases are:

  • Consent — implicit when you submit the contact form.
  • Legitimate interest — operating the platform marketing site and following up on enquiries.
  • Contract — performing pre-contract steps once you indicate intent to engage Aeltara.

4. How long we keep it

  • Lead data (form submissions, lead-spine events): 24 months from collection.
  • Signed services agreements: indefinite, as part of the engagement record.
  • Analytics data: per Google Analytics 4 default retention (14 months).

5. Who we share it with

We share personal data with:

  • Cloudflare, Inc. — hosts this site and the lead-capture Worker.
  • Web3Forms — relays contact-form submissions to the Aeltara inbox.
  • Google LLC — provides aggregated analytics (consent-gated).

None of the above resells personal data. Each operates under its own privacy policy and a written processing arrangement with Aeltara.

6. International transfers

Cloudflare, Web3Forms, and Google all process data outside Kenya. Under section 48 of the Kenya Data Protection Act 2019, transfers are made on the basis of standard contractual safeguards executed with each sub-processor.

7. Your rights

You have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request erasure of your data, subject to retention obligations;
  • object to processing or withdraw your consent at any time;
  • request portability of data you provided directly to us;
  • lodge a complaint with the Office of the Data Protection Commissioner.

8. Contact for data-protection queries

Email hello@aeltara.com. We respond within five working days.

Our Data Processing Agreement framework, which governs how Aeltara handles personal data on behalf of developer clients, is published at /dpa/.

9. Change log and effective date

This policy was last revised on 2026-04-29. Material changes are reflected by updating the effective date above.