Legal
Privacy Policy
Last updated: 24 October 2026
Who we are
This website is operated by Medici Labs, part of Medici Group Africa. In this policy, “we”, “us” and “our” mean Medici Labs. For personal data collected through this website, we act as the data controller under the Data Protection Act, 2019 of Kenya.
Our contact address for privacy matters is dpo@medici.africa.
What information we collect
We collect personal data only when you send us a project enquiry through the contact form. That can include:
- your full name and work email address
- your organisation and, if you choose to give it, your phone number
- the service you are interested in and your project stage or timeframe
- the description of your challenge that you write in the form
We do not ask for sensitive personal data, and we ask that you do not include any in your message.
We use cookies and analytics tools to understand how visitors use the website, improve its content and performance, and help protect it from misuse. These tools may collect information such as pages visited, approximate location, device and browser details, and how you interact with the site. We will ask for your consent before using non-essential cookies or analytics where the law requires it. You can manage or withdraw your cookie choices through the cookie controls provided on the website or by contacting us.
How we use your information
- to read and reply to your enquiry
- to discuss your needs and, if appropriate, prepare a proposal
- to keep a record of our communication with you
- to protect the website and our systems from spam and misuse
We do not sell your personal data, and we do not use your enquiry details to add you to a marketing mailing list.
Our legal basis
We process your enquiry details with your consent, which you give by ticking the consent box before sending the form, and because we need to handle your request before any agreement is made. You can withdraw your consent at any time by contacting us at dpo@medici.africa. Withdrawing consent does not affect processing that happened before you withdrew it.
Transfers outside Kenya
Some of our service providers may store or process data outside Kenya. Where that happens, we take steps to make sure your data stays protected, as the Data Protection Act, 2019 requires.
How long we keep it
We keep enquiry details only as long as we need them for the purposes above, normally about 24 months after our last contact with you, unless we need to keep them longer to meet a legal obligation. After that, we delete or anonymise them.
How we protect it
We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS) and restricted access to enquiry data. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
Your rights
Under the Data Protection Act, 2019, you have the right to:
- be informed about how we use your personal data
- access the personal data we hold about you
- object to the processing of your personal data
- ask us to correct inaccurate or incomplete data
- ask us to delete data that we no longer need or are not entitled to keep
- receive your data in a commonly used format, where the right to portability applies
To use any of these rights, contact us at dpo@medici.africa. We will respond within the time the law allows.
If you are not satisfied with how we handle your data, you can complain to the Office of the Data Protection Commissioner of Kenya at odpc.go.ke.
Children
This website is intended for businesses and is not directed at children under 18. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed. If we make a significant change, we will make that clear on this website.
Contact us
For questions about this policy or your personal data, contact Medici Labs at dpo@medici.africa or by post at 13th Delta Corner Towers, Nairobi, Kenya..