Privacy Policy

Effective date: August 15, 2018
(Last update: July 3rd, 2026)

Introduction

  1. QALLANN Consulting Limited (“us”, “we”, or “our”) operates the www.qallann.com website (“the services”). This Policy informs you of our policies regarding the collection, use and disclosure of personal data when you engage our services and our use of your data.
  2. At QALLANN, we value your privacy. In this regard, we strive to ensure that the use of your personal data that we collect from you is lawful, protected, and stored in such a manner that conforms to data protection practices, resulting in user satisfaction. By using our services, you agree to the collection and use of information in accordance with this privacy policy.
  3. This privacy policy explains the information that we collect, its use and importance in the provision of QALLANN services.
  4. This privacy policy applies to all of our services unless specified otherwise.
  5. Please also read our Terms and Conditions and Code of Ethics at www.qallann.com which describe the terms under which our services are provided to you.
  6. Should you have any questions regarding our use of your personal data, please Contact Us on our page.

Collection of Personal Data

  1. Overview: We may receive and collect data from you in several ways including when you engage with QALLANN, you Contact Us, you participate in a marketing or promotional activity conducted by ourselves, or provide data to us in any other way. This includes circumstances where we contact you directly as part of our business development activities, such as when you are a prospective or returning client. In these cases, we may collect and process your professional contact details and information about how you interact with our correspondence, even where you have not visited our website or otherwise engaged with our Service directly.

  2. Information We Collect: We collect the following categories of personal data when you sign in using our QALLANN Service:

    1. Personal Information and Contact Information: We receive, collect and store any information you enter on our website or provide us in any other way. In addition, we collect the Internet protocol (IP) address used to connect your computer to the Internet; login; e-mail address; password; computer and connection information and purchase history. We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. We also collect personally identifiable information (including name, email, phone number, address, password, communications); payment details (including credit card information), comments, feedbacks, product reviews, recommendations, and personal profile.

    2. Usage Data:  We may also collect information how the Service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. Our website is built on WordPress and hosted by Hostinger. As we are based in Kenya, our hosting is contracted with Hostinger International Limited, a company registered in Cyprus. Hostinger stores our website data on secure servers behind industry-standard security measures.

    3. Tracking and Cookies: We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyse our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Examples of Cookies we use:

      • Session Cookies. We use Session Cookies to operate our Service.

      • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.

      • Security Cookies. We use Security Cookies for security purposes.

        1. Financial Information: In order to engage our services, we collect your payment details, including but not limited to credit and debit card information, mobile money transaction details, and invoicing information. Payments are processed by Paystack, a Payment Service Provider licensed by the Central Bank of Kenya and PCI-DSS Level 1 compliant. Paystack collects and processes your card and mobile money details directly, in accordance with its own security standards. We do not store your full payment card details on our own systems. We use Intuit QuickBooks to manage our financial and accounting records, including invoicing and payment reconciliation.

        2. Location: Based on your marketing needs, we may collect information regarding your geographical information.

    4. Email Correspondence Tracking: Where we contact you directly by email, including in the course of prospecting, business development or client relationship management, we use tools including HubSpot to track whether you have opened an email and whether you have clicked any links within it. This is done using tracking pixels and trackable links. This applies to correspondence with prospective clients, returning clients and business contacts, and does not require you to have visited our website or accepted cookies on our Service. We rely on our legitimate interest in maintaining business relationships and managing our client pipeline as the lawful basis for this processing. You may object to this tracking at any time by contacting us, see Objection to Other Processing under Your Rights below.
  3. Purposes: Collection and processing of your personal data is necessary for the creation of a contractual relationship between yourself and ourselves. The purpose for which we process your data is therefore:

    1. To create and maintain a contractual relationship with QALLANN for the subscription of our services;

    2. To allow you to participate in the interactive features of our service;

    3. To provide customer care and support;

    4. To monitor usage of our services

    5. To detect technical issues;

    6. To process your payment;

    7. To facilitate research, analytics, user experience improvement;

    8. To fulfil our obligations to our business partners for the purpose of offering QALLANN services and for the purposes of financial considerations thereto; and

    9. To fulfil the requirements under the laws of Kenya, more specifically, the Data Protection Act No. 24 of 2019.

Disclosure of Personal Data

  1. Qallann: We share your information with the Qallan family on a need-to-need basis for: providing you with access to our services; providing customer support; content development; service improvement and other connected purposes.

  2. Service Providers and Partners: We use other companies or contractors to perform services on our behalf or to assist us with the provision of services to you. Such service providers include: Marketing; Customer Relationship Management (CRM) services, including HubSpot, which we use to store contact records and track engagement with our email correspondence; IT and Hosting Services, including Hostinger; Payment Processing Services, including Paystack, for the processing of credit and debit card and mobile money transactions; Accounting Services, including Intuit QuickBooks, for financial record keeping; and to process and administer surveys.

  3. Promotional Offers: QALLANN may share your information with third parties to facilitate your participation in joint promotional offers. Where this happens, the third parties shall be responsible for their own privacy practices.

  4. Protection of QALLANN and Others: QALLANN and its agents and service providers may disclose your information by dint of:

    1. Compliance with any applicable law, regulations and government request;

    2. Enforcing its Terms of Service, including investigating potential violations thereof;

    3. Prevention or cessation of suspected illegal conduct; and

    4. Protection of the rights of QALLANN, QALLANN clients, and the general public.

  5. Business Transfers: In the event of any merger, acquisition, sale, transfer of assets or other company restructuring, we shall transfer information, including personal information, provided that the receiving party expressly agrees to respect you handle your data in compliance with the Kenyan Data Protection Act, 2019 and consistent with our privacy policy.

In addition, your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

Our website and CRM data are hosted and processed through service providers including Hostinger and HubSpot. This means your data may be stored and processed on servers located outside Kenya, including within the European Union. Where this occurs, we take reasonable steps to ensure these providers apply appropriate technical and organisational measures to protect your data.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

QALLANN will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.

Your Rights

You have the following rights with respect to the data processed by QALLANN:

  • Access:  You have the right to access your personal data.
  • Amendment: You have the right to the rectification of your personal data.
  • Deletion: You have the right to delete and erase your personal data. We shall only retain the information for a defined period of time in accordance with this Privacy Policy; and data that is essential for financial and tax reporting purposes.
  • Objection to Marketing: You have a right to the refusal and opting out of the use of your personal data in marketing notifications, including opting out of email open and click tracking on correspondence sent to you. To do so, please Contact Us.
  • Objection to Other Processing: You have the right to object to the processing of your data. We shall only continue with the processing of the data for valid reasons, and in accordance with this Privacy Policy.
  • Complaint: You have a right to raise any complaint regarding the processing of your personal data, with the Office of the Data Protection Commissioner.

Changes to this Privacy Policy

  • We shall update this Privacy Policy from time to time, in compliance with the relevant and applicable laws, regulations and other compliance requirements.
  • Relevant notice will be given regarding the change of policy and the date that the updated Privacy Policy takes effect.
  • If you do not wish to accept the change of the Privacy Policy, you may disengage from QALLANN Services.
  • Use of QALLANN Services after a change of the Privacy Policy shall be deemed to be an acceptance to the change of the Privacy Policy.
  • This Privacy Policy applies from 3rd July 2026.

Other Privacy Controls

  1. Security Of Data:
    The security of your data is important to us but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

  2. Service Providers:
    We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.

    These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

  3. Analytics
    We may use third-party Service Providers to monitor and analyse the use of our Service.

    1. Google Analytics
      Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.

      You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

      For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en 
       

    2. Hotjar
      We use Hotjar in order to better understand our users’ needs and to optimise this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

      For further details, please see the ‘about Hotjar’ section of Hotjar’s support site: https://www.hotjar.com/legal/policies/privacy/.

    3. HubSpot
      We use HubSpot as our customer relationship management (CRM) platform. HubSpot allows us to store contact information, manage our client and prospect pipeline, and track engagement with emails sent from our CRM, including whether an email has been opened and whether links within it have been clicked. This tracking uses pixels embedded in emails and trackable links, and applies to business correspondence generally, not only to visitors of our website.

      Where required, tracking is limited according to the lawful basis assigned to a contact. You may object to this tracking or request that your contact record be deleted at any time by contacting us.

      For further details, please see HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy.

  4. Links To Other Sites
    Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

    We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.
     

  5. Children’s Privacy
    Our Service does not address anyone under the age of 18 (“Children”).

    We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Contact Us

If you have any questions regarding this Privacy Policy, please Contact Us.