Privacy
Privacy notice
How we handle the personal data you share with us through this website.
Last updated: October 2026
Who we are
Data Alma is a cybersecurity, data protection and training company based in Nairobi, Kenya. We process personal data in line with Kenya's Data Protection Act, 2019. You can contact us about this notice through our contact page.
What we collect
When you use our contact form, we collect the details you choose to give us: your name, email address, organisation, phone number, the topic of your enquiry and your message. We do not use advertising or tracking cookies on this website.
Why we use it
- To reply to your enquiry and provide the information or services you request.
- To keep a record of our communication with you.
We rely on your consent, which you give when you submit the form, and on our legitimate interest in responding to business enquiries. We will never sell your data or use it for unrelated marketing without your permission.
Who we share it with
Our website is hosted by Cloudflare, and contact form messages are delivered to our inbox by Web3Forms, a form delivery service. These providers process data only to deliver their service to us. Some of them may process data outside Kenya, with appropriate safeguards.
How long we keep it
We keep enquiry records for up to two years after our last contact with you, unless a longer period is required by law or for an ongoing contract.
Your rights
Under the Data Protection Act, 2019 you have the right to be informed, to access your data, to object to processing, to have inaccurate data corrected and to have your data deleted. To exercise any of these rights, contact us. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC).