Privacy Policy

This Privacy Policy explains how kenkagota.com ("this site", "I", "me") collects, uses, and protects personal data, in accordance with Kenya's Data Protection Act, 2019 (Cap. 411C) ("the Act") and the ODPC's Guidance Notes.

1. Who I am

This is Ken Kagota's personal hub and portfolio site — not a sales site for any one venture. Contact: ken@kenkagota.com. ODPC Data Controller registration number: NEEDS INPUT — registration status not yet confirmed.

2. What this site actually collects today

This section only describes features that are live in this codebase as of August 2026 — not features planned for later.

• Newsletter signup — your email address, via a double opt-in flow. You confirm by email before you're subscribed, and every email includes an unsubscribe link.
• Contact form / email — whatever you send when you reach out via the contact page or by emailing me directly.
• Bot-protection check (Cloudflare Turnstile) — runs on the newsletter form to block automated spam; it doesn't identify you personally.

3. AI chat — not currently live

This site does not currently have a built AI chat feature. If one is added later (the site's own engineering notes mention this as a planned dynamic endpoint), this section will be updated before it goes live to name the AI provider, disclose that responses are automated, and link back to this policy — the same pattern used on the Let's Do IT Better platform's own chat assistant.

4. Fund My Initiatives — not yet a live payment flow

The "Fund my initiatives" link in the header currently opens a pre-filled email to ken@kenkagota.com — no payment processor is wired up yet. Once M-Pesa, ZamuPay, and/or PayPal donation buttons are live, this section will disclose: which provider(s) process your payment, that this site never stores full card numbers (each provider's own hosted checkout is used instead), what data each provider receives (typically your name, phone/email, and transaction amount), and where those providers process that data. Don't assume any of that is implemented until this paragraph is replaced.

5. Your rights

Under the Act, you have the right to be informed, to access your data, to rectification, to erasure, to object to processing, and to data portability. To exercise any of these, email ken@kenkagota.com directly — the site doesn't yet have enough live data-collecting features to justify a dedicated request form the way the Let's Do IT Better platform does, but a direct email is monitored and real.

6. Retention

Newsletter subscriber data is kept for as long as you remain subscribed, per Act §39. Specific retention periods after unsubscribing or after a contact-form enquiry: NEEDS INPUT — not yet defined.

7. Where data is processed

Newsletter and contact-form data is processed via Cloudflare Pages Functions and stored in Supabase. Supabase's hosting region for this project: NEEDS INPUT — not confirmed. Transactional email is sent via Resend (United States).

8. Complaints

You can lodge a complaint with the Office of the Data Protection Commissioner: complaint@odpc.go.ke or via www.odpc.go.ke.

See also the Terms of Service.