Privacy Policy

InvestInNairobi.com is an investment promotion platform operated by Protata Solutions Limited, a company registered in Nairobi, Kenya. This Privacy Policy explains how we collect, process, store, and protect personal data in accordance with the Kenya Data Protection Act, 2019 and applicable international data protection standards. The platform promotes investment opportunities in Nairobi and connects global investors, diaspora professionals, businesses, and partners interested in Nairobi’s economic sectors.

1. Data Controller

For the purposes of the Kenya Data Protection Act, 2019, the Data Controller is:

Protata Solutions Limited

Nairobi, Kenya

Protata Solutions Limited is responsible for ensuring that personal data collected through this website is processed lawfully, fairly, and transparently.

2. Data Protection Law

The processing of personal data on this website is governed by the:

• Kenya Data Protection Act, 2019

• Regulations issued by the Office of the Data Protection Commissioner (ODPC)

The platform may also adhere to additional international data protection standards where applicable due to its global user base.

3. Information We Collect

We may collect personal information when users interact with our website, including when submitting enquiries, registering for events, or subscribing to updates.

Personal Information

This may include:

• full name

• email address

• telephone number

• organisation or company name

• country of residence

• investment interests

Business and Investor Information

Where relevant, we may collect information relating to:

• company profiles

• investment interests

• sector preferences

• project details

This information helps facilitate investment enquiries and partnerships.

Technical Information

When users visit the website, certain information may be collected automatically, including:

• IP address

• browser type and version

• device type

• operating system

• pages visited

• time spent on the website

4. Purpose of Data Collection

Personal data collected through the platform may be used for the following purposes:

• responding to enquiries and requests

• facilitating investor engagement

• sharing investment opportunities and sector information

• organising investment forums and events

• sending newsletters and updates

• improving website functionality and performance

• ensuring security and fraud prevention

Personal data is collected only where necessary for legitimate business and operational purposes.

5. Legal Basis for Processing Personal Data

Under the Kenya Data Protection Act, personal data may be processed based on:

• user consent

• legitimate interest in promoting investment opportunities

• contractual obligations

• compliance with legal and regulatory requirements

Users may withdraw consent at any time.

6. Data Sharing

Personal data may be shared with relevant partners for legitimate investment facilitation purposes, including:

• government institutions

• investment promotion agencies

• project developers

• financial institutions

• event partners

Personal data will only be shared where necessary and in accordance with applicable data protection laws.

7. Cross-Border Data Transfers

InvestInNairobi.com operates globally and may facilitate interactions between users located in different countries. The website infrastructure is hosted on Amazon Web Services (AWS) servers located in London, United Kingdom. Where personal data is transferred outside Kenya, Protata Solutions Limited ensures that appropriate safeguards are implemented in accordance with the Kenya Data Protection Act, 2019.

8. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.

Typical retention periods may include:

• enquiry records – up to 24 months

• event registration information – up to 36 months

• marketing communications – until the user unsubscribes

Users may request deletion of their personal data at any time.

9. Rights of Data Subjects

Under the Kenya Data Protection Act, users have the right to:

• access their personal data

• request correction of inaccurate data

• request deletion of personal data

• object to processing

• withdraw consent

• request restriction of processing

Requests may be submitted by contacting Protata Solutions Limited.

10. Data Security

Protata Solutions Limited implements appropriate technical and organisational measures to protect personal data from:

• unauthorised access

• accidental loss

• misuse or alteration

• cyber threats

These measures include secure hosting, encryption, and access controls.

11. Third-Party Websites

This website may contain links to third-party websites. Protata Solutions Limited is not responsible for the privacy practices of external websites, and users are encouraged to review their respective privacy policies.