Privacy Policy
Last updated 2 August 2026
This policy explains what CitaTech does with personal information collected through this website, how long we keep it, and what you can ask us to do with it.
01Who we are
CitaTech is a technology company based in Nairobi, Kenya. We are responsible for personal data collected through this website.
You can reach us about anything in this policy at product@citatech.cloud.
02What this policy covers
This policy applies to this website only. Our products, CitaPay and CitaTech POS, process personal data under their own separate agreements and privacy terms, which you accept when you sign up for those services. If you are a merchant, or a customer of a merchant, the handling of that data is governed by those terms rather than this page.
03What we collect
We collect only what you choose to send us. When you submit the contact form, we receive:
- Your name
- Your email address
- Your business name, if you provide one
- The content of your message
- The date and time of the submission
We do not use advertising trackers and we do not build behavioural profiles of visitors. We do not collect special categories of personal data through this site, and you should not send them to us through the contact form.
04Why we use it
We use the information you send to respond to your enquiry, to understand what you need, and to keep a record of our correspondence.
We only hold it because you chose to send it. You can ask us to delete it at any time by emailing us, and we will.
We do not sell personal data, we do not share it for advertising, and we do not make automated decisions about you.
05Who else processes it
Your enquiry is delivered to our own business mailbox by email. In practice that means it passes through, and is stored by, the providers who run our email and host this site:
- Our email provider, which hosts the mailbox your enquiry is delivered to
- Our hosting provider, which runs the server this site is served from
These providers act as data processors on our behalf and are bound to handle the data only on our instructions. We do not pass your information to anyone else unless we are legally required to.
06Where it is stored
Our email and hosting providers may store or process data on servers outside Kenya. We choose providers that commit to protecting the data they hold on our behalf.
If you would prefer your enquiry not to leave Kenya, contact us by telephone or in person instead and we will handle it accordingly.
07How long we keep it
We keep enquiry correspondence for as long as we need it to deal with your request and to maintain a reasonable record of our business dealings, and for no longer than 24 months after our last contact with you.
Where you go on to become a client, the correspondence is retained under the terms of that engagement instead. You can ask us to delete it sooner at any time.
08Your rights
You can ask us at any time to:
- Tell you what personal data we hold about you
- Correct anything inaccurate or out of date
- Delete what we hold
- Stop using it for a particular purpose
- Send you a copy of it
Email product@citatech.cloud and we will respond within 30 days, at no charge.
If you are not satisfied with how we have handled your request, tell us and we will work it out with you.
10Security
This site is served over HTTPS. Enquiries are transmitted to our mailbox over an authenticated, encrypted connection, and access to that mailbox is limited to the people who need it.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will tell you promptly and explain what happened.
11Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes affecting data we have already collected will be communicated directly to anyone affected.
12Contact
Questions, requests or complaints about this policy or your data: product@citatech.cloud.
CitaTech, Nairobi, Kenya.