Privacy Policy

1. Information We Collect

We collect information to provide better services and improve your experience. The types of information we gather include:

Information You Provide Directly

• Contact Information: Your name, email address, phone number, and company name when you reach out via our contact form, email, or phone.
• Project Details: Requirements, specifications, design assets, brand guidelines, and other materials you share with us for project development.
• Account Credentials: Login information for hosting, CMS platforms, or third-party services you grant us access to during development.
• Payment Information: Billing details necessary to process invoices and transactions. We do not store full payment card details on our servers — all payment processing is handled by PCI-compliant third-party processors.
• Communications: Records of correspondence between you and our team, including emails, chat messages, and meeting notes.

Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, navigation paths, click patterns, and referring URLs.
• Device Data: Browser type and version, operating system, screen resolution, language preference, and device type.
• Network Data: IP address, approximate geographic location (city/country level), and internet service provider information.

2. How We Use Your Information

We process your personal information only for legitimate, specific purposes. These include:

• Service Delivery: To develop, deliver, and maintain the software and web solutions you have commissioned.
• Project Communication: To send project updates, gather feedback, share deliverables, and coordinate timelines.
• Billing & Invoicing: To process payments, generate invoices, and maintain financial records as required by law.
• Website Improvement: To analyze usage patterns, diagnose technical issues, and improve the functionality and content of our website.
• Security & Fraud Prevention: To detect, investigate, and prevent unauthorized access, fraudulent activity, or abuse of our services.
• Legal Compliance: To fulfill our legal obligations, resolve disputes, and enforce our agreements.

3. Data Sharing & Disclosure

We value your trust and do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

• Trusted Service Providers: With carefully vetted partners who assist us in operating our business — including hosting providers, payment processors, analytics services, and communication tools. These providers are contractually obligated to protect your data.
• Legal Requirements: When required to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Protection of Rights: When disclosure is necessary to protect our rights, safety, property, or the safety of our clients and the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified of any such change.
• With Your Consent: In any other circumstance, we will share your data only with your explicit consent.

4. Data Security

Protecting your data is a top priority. We implement industry-standard technical and organizational measures to safeguard your information, including:

• Encryption in Transit & at Rest: All data transmitted between your browser and our servers is encrypted using TLS/SSL. Sensitive data stored on our systems is encrypted at rest.
• Access Controls: Access to client information is restricted to authorized team members on a need-to-know basis, protected by multi-factor authentication.
• Regular Security Reviews: We conduct periodic security assessments and vulnerability scans to identify and address potential risks.
• Secure Infrastructure: Our services are hosted on enterprise-grade infrastructure with automated backups, DDoS protection, and 24/7 monitoring.

While no method of electronic transmission or storage is 100% secure, we continuously strive to use commercially acceptable means to protect your personal information.

5. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. These include:

• Essential Cookies: Required for core website functionality such as navigation, form submissions, and security features.
• Analytics Cookies: Help us understand how visitors interact with our website, so we can improve content and user experience. We use privacy-respecting analytics tools.
• Preference Cookies: Remember your settings and preferences for a more personalized experience on return visits.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

6. Your Rights & Choices

We believe you should have full control over your personal data. Depending on your location, you may have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing of your personal data for direct marketing or legitimate interest purposes.
• Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at rajeynj@gmail.com. We will respond to your request within 30 days.

7. International Data Transfers

Frank Tech is based in Nairobi, Kenya, and serves clients worldwide. If you access our services from outside Kenya, your information may be transferred to, stored, and processed in Kenya or other countries where our service providers operate.

We take appropriate steps to ensure that your data receives an adequate level of protection in accordance with applicable data protection laws, regardless of where it is processed.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Active Client Data: Retained for the duration of our business relationship plus any applicable warranty or support period.
• Financial Records: Retained for a minimum of 7 years as required by tax and accounting regulations.
• Website Analytics: Aggregated, anonymized data may be retained indefinitely for statistical purposes.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page.
• Post a notice on our website for significant changes.
• Notify active clients directly via email when changes materially affect how we handle their data.

We encourage you to review this policy periodically to stay informed about how we protect your information.