Privacy Policy

Last Updated: April 2026

1. INTRODUCTION
Opolox ("we," "our," "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services.

2. INFORMATION WE COLLECT

Website Visitors:
- Contact information (name, email, phone) submitted via contact forms or meeting scheduling
- Usage data (IP address, browser type, pages visited) collected automatically
- Cookies and similar tracking technologies

Service Clients:
- Project information, financial data, and business details provided during engagements
- Information governed by separate confidentiality agreements signed with clients

3. HOW WE USE YOUR INFORMATION
- To respond to inquiries and schedule meetings
- To provide bankability assessment and preparation services
- To improve our website and services
- To send relevant updates (you can opt out anytime)
- To comply with legal obligations

4. LEGAL BASIS FOR PROCESSING (GDPR/Kenya DPA)
- Consent: When you submit forms or agree to communications
- Contract: When providing services to clients
- Legitimate interests: Website analytics and service improvement
- Legal obligation: Compliance with applicable laws

5. DATA SHARING
We do NOT sell, rent, or trade your personal information.

We may share information with:
- Service providers (hosting, analytics) under strict confidentiality
- Legal authorities when required by law
- Professional advisors under confidentiality obligations

Client project data is shared ONLY as permitted by signed confidentiality agreements.

6. ANONYMIZED DATA
We may create anonymized, aggregated benchmarking data that does not identify individuals or specific projects. This data may be used for research, analysis, and industry insights.

7. DATA SECURITY
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted cloud storage
- Access controls and authentication
- Regular security reviews

However, no internet transmission is 100% secure. We cannot guarantee absolute security.

8. DATA RETENTION
- Website contact data: Retained for 2 years or until you request deletion
- Client project data: Retained for 5 years post-engagement or as required by law
- We delete data upon request unless legally required to retain

9. YOUR RIGHTS (GDPR/Kenya DPA)
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability (receive your data in structured format)
- Withdraw consent at any time
- Lodge a complaint with the Kenya Office of the Data Protection Commissioner

To exercise these rights, contact: privacy@opolox.com

10. COOKIES
We use cookies for:
- Essential website functionality
- Analytics (understanding how visitors use our site)
- Preferences (remembering your settings)

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

11. INTERNATIONAL TRANSFERS
Your data may be processed outside Kenya. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable laws.

12. CHILDREN'S PRIVACY
Our website and services are not directed to individuals under 18. We do not knowingly collect data from minors.

13. CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date.

14. CONTACT & DATA PROTECTION
For privacy questions or to exercise your rights:
Email: privacy@opolox.com
Address: Opolox, Kenya

Data Protection Officer: Soji Omisore, Founder
Email: privacy@opolox.com

---