Privacy Policy – AreaSpy Kenya
Last Updated: March 2026 This privacy policy explains how AreaSpy Security Kenya collects, uses, stores, and protects your personal information when you visit our website at areaspy.co.ke, contact us by phone or WhatsApp, place an order, or use any of our services. We operate in compliance with the Kenya Data Protection Act 2019 and the Kenya Data Protection (General) Regulations 2021.
Who We Are
AreaSpy Security Kenya is a security camera installation company registered and operating in Kenya. Registered business name: AreaSpy Security Kenya
Physical address: Pana House, Maji-Mazuri Street, Off Kasarani Mwiki Road, Kasarani, Nairobi, Kenya
Phone: +254 740 030 496
Email: info@areaspy.co.ke
Website: https://areaspy.co.ke
We are the data controller for personal information collected through this website and through our business operations.
What Personal Information We Collect
We collect personal information in the following ways:
When you contact us:
- – Your name
- – Your phone number
- – Your email address
- – Your location or area (to assess service availability)
- – The nature of your enquiry
- – Any other information you choose to share with us when describing your security needs
When you place an order:
- – Your name
- – Your phone number
- – Your delivery or installation address
- – Your county and area
- – Payment information
- M-Pesa transaction confirmation, bank transfer reference, or other payment record (we do not store card numbers
- card payments are processed through our payment provider and we do not see or store full card details)
When you visit our website:
- – IP address – Browser type and version
- – Pages visited and time spent
- – Referring URL
- – Device type (collected automatically by our website analytics tools -Google Analytics 4)
When you interact with us on WhatsApp:
- – Your WhatsApp display name
- – Your phone number
- – The content of your messages (stored in WhatsApp conversation history on our business device)
- When you interact with us on Facebook:
- – Your Facebook profile name
- – Any information you share in comments or messages (subject to Meta’s own privacy policy in addition to this policy
Why We Collect Your Personal Information
We collect and use your personal information for the following purposes:
To respond to your enquiries — When you contact us about CCTV installation, repair, or products, we use your contact details to respond to your request.
To provide our services — When you book an installation or repair, we use your name, phone number, and address to schedule and complete the work.
To process payments — We use your payment information to confirm receipt of payment and issue receipts.
To deliver products — For product orders, we use your delivery address to arrange delivery.
To send you relevant information — If you have engaged with us as a customer or enquirer, we may send you information about our services, promotions, or security tips that are relevant to your situation. You can opt out of these communications at any time by telling us directly.
To improve our website — We use website analytics data to understand how visitors use our site and to improve the content and user experience. To comply with legal obligations — We may be required to retain certain records for tax, regulatory, or legal compliance purposes.
We do not use your personal information for any purpose other than those listed above without your explicit consent.
Legal Basis for Processing Your Personal Information
Under the Kenya Data Protection Act 2019, we process your personal information on the following legal bases:
Contract performance — Processing your name, contact details, and address is necessary to fulfil the service or product you have requested from us.
Legitimate interests — Using your contact information to respond to enquiries and using website analytics to improve our site are within our legitimate business interests and do not override your privacy rights.
Legal obligation — Retaining payment and transaction records is required for tax and business compliance purposes.
Consent — Where we send you marketing communications beyond direct responses to your enquiries, we rely on your consent. You can withdraw consent at any time.
How We Store Your Personal Information
Physical records — Installation records, quotations, and payment receipts are stored in our business premises in Kasarani, Nairobi, with access restricted to AreaSpy staff who need them for their work.
Digital records — Customer information is stored in our business email system (Zoho Mail), our WhatsApp Business account, and our WooCommerce order management system on our website.
Access to these systems is password-protected and restricted to authorised AreaSpy staff.
Website data — Our website is hosted on a VPS server. Website visitor analytics are processed by Google Analytics 4 and stored on Google’s servers subject to Google’s privacy policy.
We do not store your personal information on unencrypted public systems or share it with unauthorised parties
How Long We Keep Your Personal Information
Enquiry records — If you contacted us but did not proceed with a service, we retain your contact details for up to 12 months in case you return with the same enquiry. After 12 months we delete or anonymise enquiry records.
Customer records — For customers who have used our services, we retain installation records, payment records, and contact information for 7 years for tax and business compliance purposes.
Website analytics — Google Analytics 4 data is retained for 14 months by default in our GA4 property settings. We do not retain raw IP addresses beyond what GA4 processes automatically.
WhatsApp conversations — WhatsApp conversation history is retained on our business device for as long as the conversation is active. We do not archive or back up WhatsApp conversations to external storage beyond what WhatsApp provides natively.
Who We Share Your Personal Information With
We do not sell your personal information to any third party.
We do not share your personal information with advertisers or data brokers.
We share your personal information only in the following limited circumstances:
Service delivery partners — If your installation or delivery requires a contracted technician or courier partner, we share your name, phone number, and address with that partner for the purpose of completing your service only. We do not share more information than is necessary for that purpose.
Payment processors — M-Pesa payments are processed through Safaricom’s M-Pesa platform. Card payments are processed through our payment gateway provider (Pesapal). We do not share your payment information with any other party.
Legal requirements — We may disclose your personal information if required to do so by Kenyan law, court order, or lawful request from a regulatory or law enforcement authority.
Service providers — Our website uses the following third-party service providers who may process personal data as part of delivering their service:
- – Google Analytics 4 (website analytics)
- – Google Search Console (website performance)
- – Zoho Mail (business email)
- – ZeptoMail (transactional email)
- – Pesapal (payment processing)
- – WooCommerce / WordPress (order management)
- – WhatsApp Business (customer communications)
Each of these providers operates under their own privacy policy and data processing terms.
Cookies
Our website uses cookies — small text files stored on your device when you visit our site.
We use the following types of cookies:
Necessary cookies — Required for the website to function. These include cookies that maintain your shopping cart session and your logged-in status if you have a customer account. These cookies cannot be disabled without breaking core website functionality.
Analytics cookies — Google Analytics 4 sets cookies that allow us to understand how visitors use our site — pages visited, time spent, and traffic sources. These cookies collect anonymous data and do not identify you personally.
Marketing cookies — If you have arrived at our website from a Facebook advertisement, the Facebook Pixel may set a cookie that allows Facebook to measure the effectiveness of our advertising. This cookie is subject to Meta’s privacy policy. You can control cookie settings in your browser. Disabling analytics and marketing cookies will not affect your ability to use our website or request our services.
Your Rights Under the Kenya Data Protection Act 2019
As a data subject under the Kenya Data Protection Act 2019, you have the following rights regarding your personal information held by AreaSpy Security Kenya:
Right of access — You have the right to request a copy of the personal information we hold about you.
Right to rectification — You have the right to request that we correct any inaccurate personal information we hold about you.
Right to erasure — You have the right to request that we delete your personal information where we no longer have a lawful basis to retain it.
Right to restrict processing — You have the right to request that we restrict how we use your personal information in certain circumstances.
Right to object — You have the right to object to our processing of your personal information where we are relying on legitimate interests as our legal basis.
Right to data portability — You have the right to request that we provide your personal information in a structured, commonly used format that you can transfer to another service provider.
Right to withdraw consent — Where we are processing your personal information on the basis of your consent, you have the right to withdraw that consent at any time. To exercise any of these rights, contact us at:
- Email: info@areaspy.co.ke
- Phone: +254 740 030 496
- Address: Pana House, Maji-Mazuri Street, Off Kasarani Mwiki Road, Kasarani, Nairobi
We will respond to your request within 21 days. We may need to verify your identity before processing your request.
CCTV Surveillance on Our Installed Systems
AreaSpy Security Kenya installs CCTV systems for our clients. The personal data captured by CCTV cameras installed by us is controlled by our clients, not by AreaSpy Security Kenya. Our clients are the data controllers for footage captured on systems we install.
We advise all clients on their obligations under the Kenya Data Protection Act 2019 in relation to CCTV surveillance, including:
- – Displaying visible signage notifying people they are being recorded
- – Defining and documenting a retention period for footage
- – Restricting access to recorded footage to authorised persons
- – Responding appropriately to subject access requests for footage
AreaSpy Security Kenya does not retain access to footage recorded on client systems after installation is complete unless a client specifically grants us maintenance access for repair or technical support purposes.
Children’s Privacy
Our services are directed at adults making decisions about security for their properties and businesses. We do not knowingly collect personal information from children under 18 years of age. If you believe we have inadvertently collected information from a child, contact us at info@areaspy.co.ke and we will delete it promptly.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our business practices, the services we offer, or applicable law. When we make material changes we will update the Last Updated date at the top of this page.
We encourage you to review this page periodically. Continued use of our website or services after a policy update constitutes acceptance of the updated policy.
Contact Us About Privacy
If you have any questions, concerns, or complaints about how we handle your personal information, contact us directly:
AreaSpy Security Kenya Pana House, Maji-Mazuri Street Off Kasarani Mwiki Road Kasarani, Nairobi, Kenya Email: info@areaspy.co.ke
Phone: +254 740 030 496
WhatsApp: +254 740 030 496
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya: Office of the Data Protection Commissioner Website: www.odpc.go.ke Email: info@odpc.go.ke