Privacy Policy
Effective date: March 2026
1. Who We Are
Kaara Works is a trading name of Hunja Capital Limited, a company registered in Kenya and based in Nanyuki, Laikipia County. We provide custom software development, AI automation, and consulting services to businesses. When this policy says "Kaara Works", "we", "us", or "our", it refers to Hunja Capital Limited.
You can contact us at any time at isaac@kaara.works.
2. What Data We Collect
We only collect information you give us directly. This includes:
Contact form submissions
When you fill in our contact or project inquiry form, we collect your name, email address, company or organisation name (if provided), and the details of the project or question you share with us.
Email correspondence
If you email us directly, we retain that correspondence for the purposes of responding to you and managing our working relationship.
Project and engagement data
Once we begin working with you, we may collect additional details necessary to deliver the agreed scope of work, including technical requirements, business context, and billing information.
Website analytics
We use Google Analytics to understand how visitors use this website. This collects anonymised data such as pages visited, time on site, device type, and approximate geographic location. This data does not identify you personally.
We do not collect sensitive personal data, and we do not use cookies beyond what is strictly necessary for analytics.
3. How We Use Your Data
We use the information we collect for the following purposes:
Responding to enquiries
To reply to messages submitted through our contact form or sent to us by email.
Delivering contracted services
To plan, scope, build, and deliver custom software or automation work you have engaged us to carry out.
Billing and invoicing
To issue invoices and process payments in accordance with the terms agreed in your service contract.
Project communication
To keep you updated on project progress, request feedback, and coordinate delivery milestones.
Improving our website
To understand which content is useful and how to make the site easier to use, using aggregate, anonymised analytics data.
We will not use your data for purposes other than those listed above without your explicit consent. We do not send unsolicited marketing.
4. Third-Party Services
We rely on a small number of carefully selected third-party services to operate this website and deliver our work. Each of these services has its own privacy policy and data processing terms.
Vercel
This website is hosted on Vercel. Vercel may process request metadata (such as IP addresses and request headers) as part of delivering the site. For details, see the Vercel Privacy Policy.
Resend
When you submit a contact form, your message is delivered to us via Resend, a transactional email service. Your name, email address, and message content are processed by Resend solely for the purpose of delivering that email. For details, see the Resend Privacy Policy.
Google Analytics
We use Google Analytics (with IP anonymisation enabled) to understand how people use this site. Google processes anonymised behavioural data on our behalf. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on. For details, see Google's Privacy Policy.
We do not sell, rent, or share your personal data with any third parties for marketing or commercial purposes.
5. Data Retention
We retain enquiry and project data for as long as is necessary to manage our business relationship and meet any legal obligations, typically no longer than five years after the conclusion of an engagement. Analytics data is subject to Google's own retention settings and is not identifiable to individuals.
You may ask us to delete your personal data at any time by contacting isaac@kaara.works. We will action such requests within 30 days unless we are required by law to retain the data.
6. Your Rights Under the Kenya Data Protection Act 2019
The Kenya Data Protection Act 2019 gives you rights in relation to your personal data. You have the right to:
- —Be informed about how your data is collected and used (this policy fulfils that obligation).
- —Access the personal data we hold about you.
- —Request correction of any inaccurate or incomplete data.
- —Request deletion of your data, subject to legal retention requirements.
- —Object to or restrict the processing of your data.
- —Lodge a complaint with the Office of the Data Protection Commissioner of Kenya.
To exercise any of these rights, contact us at isaac@kaara.works. We will respond within 30 days.
7. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted via HTTPS. Access to enquiry data and project information is restricted to authorised personnel only.
No method of transmission over the internet is completely secure. While we do our best to protect your data, we cannot guarantee absolute security.
8. Children's Privacy
Our services are directed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. We encourage you to review this page periodically. Continued use of our website or services after any change constitutes your acceptance of the updated policy.
10. Contact
For any questions about this policy, or to exercise your data rights, please contact: