Privacy Policy

We respect your privacy and protect your information. Personal data is used only for service delivery and never shared without consent.

Privacy Policy, Kisumu Pest Control

Kisumu Pest Control respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use and protect it, when we may share it, and the choices you have about your information. It applies to information we collect through our website, mobile apps, over the phone, in person, and through other interactions you have with us.

If you have questions or want to exercise any of the rights described below, please contact our Data Protection Officer at the contact details provided at the end of this policy.

1. Scope and applicability

This policy applies to:

  • Visitors to our website and users of our online services.
  • Clients and prospective clients who request quotes, book services, or purchase products.
  • Suppliers, partners, trainees, and job applicants.
  • Any other individuals whose personal data we collect in the course of providing services.

This policy does not replace any specific contractual terms you may sign with us. Where a contract contains different privacy or data handling terms, the contract will take precedence in relation to that service.

2. Information we collect

We collect different types of information depending on your interaction with us:

Personal information you provide directly

  • Name, address, phone number, email address.
  • Billing and payment details (mobile money number, bank account details, transaction IDs).
  • Property details and location information needed to provide pest control services (building type, access instructions).
  • Identification documents where required for verification (for example, for certain supplier or training enrollments).
  • Job application materials (CVs, references) for recruitment purposes.
  • Training enrolment data and exam records where you participate in our courses.

Information collected automatically

  • Technical and usage information when you visit our website or use our apps: IP address, device and browser information, pages visited, referral URL, and analytics data.
  • Cookies and similar tracking technologies to improve site performance and analyze usage patterns.

Information from third parties

  • Payment confirmation from payment providers.
  • Supplier or partner references and company details.
  • Publicly available information or information you authorize third parties to share with us (for example, business profiles or previous service history).

Sensitive information

  • We normally avoid collecting sensitive personal data. If such data is required (for example, medical information needed for safety when treating certain environments), we will request your explicit consent and keep the information secure and limited to the stated purpose.

3. How we use your information

We use personal information for purposes including:

  • To provide, maintain, and improve our pest control services and products.
  • To schedule, perform, and follow up on service appointments, inspections, treatments, and re-visits.
  • To handle orders, billing, payments, refunds, and supplier transactions.
  • To manage training programs, exams, certification issuance, and course administration.
  • To respond to inquiries, provide customer support, and handle complaints.
  • To send important service notifications, appointment reminders, and safety instructions.
  • For internal record keeping, quality assurance, staff training, and performance monitoring.
  • For marketing and communications (only with your consent where required).
  • To comply with legal and regulatory obligations and to prevent fraud or misuse of our services.

We will not use your personal data for purposes incompatible with the purposes described here without your prior consent.

4. Legal basis for processing

Where applicable law requires us to identify a legal basis for processing personal data, we rely on one or more of the following grounds:

  • Performance of a contract: processing is necessary to provide services or products you requested.
  • Legal compliance: processing necessary to comply with legal obligations.
  • Legitimate interests: for business administration, fraud prevention, and improving our services, provided your rights are respected.
  • Consent: where you have provided clear consent (for example, for marketing communications or optional tracking).
  • Vital interests or other legal bases where required (for example, safety-related medical information).

5. Cookies and tracking technologies

We use cookies and similar technologies to make our website work more effectively and to understand how visitors use it. Cookies may be:

  • Strictly necessary cookies for site functionality.
  • Analytical cookies to measure site performance and usage.
  • Functional cookies to remember preferences.
  • Marketing cookies (used only with consent).

You can control cookie preferences through your browser settings and through any cookie controls presented on our site. Blocking some cookies may affect website functionality.

6. Sharing and disclosure of information

We share personal information only where necessary and lawful, including:

  • With service providers and partners who perform services on our behalf (payment processors, cloud hosting, logistics providers, analytics providers). We require these partners to protect your data and use it only for permitted purposes.
  • With suppliers and logistics partners for order fulfilment and product deliveries.
  • With regulatory authorities, law enforcement, or courts when required by law or to protect our legal rights.
  • With other third parties when you consent or when it is reasonably necessary for the operation of our business (for example, sharing contact information with a subcontractor who will perform a scheduled treatment).
  • In connection with a sale, merger, reorganization, or insolvency event, in which case customer information may be transferred as a business asset (we will seek to protect personal data in any such transaction).

We do not sell your personal information to third parties.

7. International transfers

Personal information may be stored and processed in Kenya and in other countries where our service providers operate. When we transfer data internationally we take reasonable steps to ensure appropriate safeguards are in place (for example, contractual clauses requiring appropriate security and data protection measures). If you have concerns about international transfers, please contact us.

8. Data retention

We retain personal data only as long as necessary for the purposes described in this policy and to comply with legal, tax, and accounting obligations. Retention periods vary by data type:

  • Transaction and billing records: retained for a period required by tax and accounting rules.
  • Service records and treatment history: retained for a period relevant to warranties, re-treatment guarantees, and follow-up obligations.
  • Marketing consent records: retained until you withdraw consent.
  • Recruitment and training records: retained in line with recruitment and professional development needs or legal requirements.

When data is no longer required, we will delete or anonymize it in a secure manner.

9. Security

We implement technical, administrative, and physical measures to protect personal information from unauthorized access, loss, misuse, or modification. These measures include access controls, staff training, encryption where appropriate, secure servers, and data minimization.

No data transfer or storage can be guaranteed completely secure. If we become aware of a security incident affecting your personal data that creates a real risk of harm, we will notify you and the relevant regulator as required by law.

10. Your rights

Subject to applicable law, you have rights in relation to your personal information. These may include the right to:

  • Access: obtain confirmation of whether we process your personal data and request a copy.
  • Rectification: correct inaccurate or incomplete information.
  • Erasure: request deletion of your personal data where there is no lawful reason for us to retain it.
  • Restriction: request limitation of processing in certain circumstances.
  • Portability: receive your personal data in a commonly used, machine-readable format and, where feasible, transmit it to another data controller.
  • Object: object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent: where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection Officer using the contact details at the end of this policy. We may request identification information and additional details to verify your request. We will respond within a reasonable time and in line with applicable laws (typically within 30 calendar days; complex requests may take longer).

11. Marketing and communications

We may send service-related messages, appointment reminders, safety notices, and promotional communications where you have consented or where we have another lawful basis. You can opt out of marketing communications at any time by following the unsubscribe instructions in the message or contacting our support team.

12. Children

Our services are not directed at children under 18. We do not knowingly collect personal data from children without parental consent. If you believe we have collected such data, please contact us to request deletion.

13. Third-party websites and services

Our website may contain links to other websites, tools, or services. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to read their privacy policies before providing personal information.

14. Complaints and supervisory authority

If you are unhappy with how we handle your personal information, you may contact our Data Protection Officer first so we can try to resolve your concern. If you remain dissatisfied, you may lodge a complaint with the relevant data protection authority in your jurisdiction (for example, the Office of the Data Protection Commissioner of Kenya) or other appropriate regulator. We will cooperate with any regulator investigating a complaint about our data practices.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will publish the revised policy on our website with a new “Last revised” date. Material changes will be notified to affected users where required by law or where we have your contact details.

16. How to contact us

If you have questions, want to exercise your data rights, or wish to make a privacy-related request, please contact:

Data Protection Officer

Kisumu Pest Control

Email: service@rafikipestcontrol.com 

Phone: +254 721 213 778 or +254 717 819 204

For formal notices or escalations, you may also write to our postal address above.

17. Practical examples and common scenarios

  • Booking a service: when you request a quote or book a treatment, we collect contact and property details to schedule and perform the service, and to issue invoices.
  • Payments: payment details are processed by trusted payment partners; we store only the minimum payment-related information necessary to reconcile transactions unless you expressly authorize us to store more.
  • Training enrolment: we collect identification and contact details to register participants, administer exams, and issue certificates.
  • Supplier onboarding: we collect company records, contact persons, and banking information necessary to process orders and payments.

18. Data protection by design and default

We aim to integrate privacy protections into our services by limiting the personal data we collect, securing systems, training staff, and regularly reviewing our processes. Where we use service providers, we contractually require them to implement appropriate safeguards.

19. Business transfers

If Kisumu Pest Control is involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction. We will seek to ensure continued protection of personal data and notify affected individuals where required.

20. Consent for international clients

If you are located outside Kenya and you provide personal data to us, you consent to the transfer, processing, and storage of your data in Kenya and other countries where our service providers operate.