Privacy Policy

01. Scope & Legal Entity

This Privacy Policy applies to all personal data collected by UniqueTechCamp, operating out of Nairobi, Kenya, across our web domains, client portals, staging sandboxes, AI chatbots, automated messaging workflows, and direct communications.

By accessing our services, submitting inquiry forms, or entering into software development agreements, you acknowledge the terms outlined in this document. If you do not agree, please discontinue using our platforms immediately.

02. Information We Collect

Data You Voluntarily Provide

Identity Data: Full name, professional title, business name.
Contact Data: Corporate email address, WhatsApp telephone number, physical office location.
Project Data: Technical scope specifications, architectural requirements, brand assets, database schemas, budget parameters.
Financial Data: Billing contact information, M-Pesa transaction reference codes, bank confirmation details.

Automated & Telemetry Data

Network Identifiers: IP addresses, browser engine version, device fingerprint, geographic country/region.
Usage Metrics: Session duration, page referral paths, button clickstreams, scroll velocity.
AI Interaction Logs: Query prompts input into our interactive lead qualification bots, response latencies, and conversion triggers.

03. Lawful Grounds for Processing

Pursuant to the Kenya Data Protection Act, 2019 and Article 6 of the EU GDPR, we process your information strictly under the following lawful mechanisms:

Contractual Necessity: To draft software contracts, build custom web platforms, deliver AI automations, and provide maintenance support.
Consent: Explicitly obtained before sending non-transactional marketing communications, case study newsletters, or deploying analytical cookies.
Legitimate Interests: To detect malicious cyber intrusions, prevent fraudulent payment activities, and improve web architecture performance.
Legal Compliance: Satisfying statutory tax accounting requirements under Kenya Revenue Authority (KRA) obligations.

04. How We Protect Your Data

We employ industry-leading defensive countermeasures to protect client code, trade secrets, customer records, and communication histories:

256-Bit TLS Encryption

All data in transit is encrypted using modern cryptographic ciphers.

Zero Public Access

Staging environments and API credentials are kept behind strict IAM controls.

Encrypted Backups

Daily automated snapshots stored with cryptographic immutability.

05. AI Systems & Model Training Disclaimers

We engineer bespoke AI Lead Generation, WhatsApp Qualification bots, and automated customer nurture funnels for our clients. In connection with these systems:

Proprietary Confidentiality: Your proprietary source code, internal business metrics, and private customer databases are NEVER used to train public foundation models (such as public OpenAI or Anthropic models).
Enterprise API Guardrails: When calling external LLM inference endpoints (via OpenAI, Anthropic, or AWS Bedrock), we utilize enterprise zero-retention API contracts ensuring inputs and outputs are not retained or monitored for public model training.
Human Oversight: Critical transactional actions, billing authorizations, and system deletions always require authenticated human administrator verification.

06. Third-Party Sub-Processors

To deliver enterprise-grade performance, we collaborate with strictly vetted third-party cloud infrastructure providers:

Sub-Processor	Purpose	Location
Amazon Web Services (AWS) / DigitalOcean	Cloud server hosting, database clusters, encrypted backups	EU / US / South Africa
Safaricom M-Pesa Developer API	Mobile payment processing (C2B / B2B)	Kenya
Google Workspace & Cloud Console	SMTP communication, business correspondence	Global
Meta WhatsApp Business API	Client conversational lead qualification & notifications	Global

07. Your Statutory Rights

Under the Data Protection Act (Kenya) and international privacy frameworks, you retain comprehensive rights regarding your personal records:

Right of Access & Portability

Request a copy of all information stored regarding your business or person in a readable JSON or CSV format.

Right of Rectification

Correct any outdated or incomplete personal records immediately upon request.

Right to Erasure ("To Be Forgotten")

Request the deletion of your records once contractual obligations and statutory tax retention periods expire.

Right to Object & Restrict Processing

Revoke consent for direct promotional campaigns or automated profiling with a single click.

08. Data Protection Officer (DPO) Contact

To exercise any of your statutory data rights or file an inquiry regarding our compliance standards, contact our designated privacy team:

UniqueTechCamp Privacy & Compliance Desk

Office of the Data Protection Officer

Nairobi, Kenya

Official Email: info@uniquetechcamp.org

Alternate Email: UniqueTechCamp@gmail.com

Direct Phone: +254 715 479 955

Your Trust & Privacy Are Sacred