Privacy Policy
Last updated: 17 April 2026
Who we are
Tibu Afrika Consultancy Ltd (Tibu Afrika) is a consultancy based in Nakuru, Kenya. If you have questions about this policy or how we handle your data, email us at info@tibuafrika.org.
What information we collect
Contact form submissions
When you fill in our contact form, we collect your name, email address, optional phone number, subject and message. These are delivered to our inbox; we do not store them in a database.
Contact form metadata
The form handler records your IP address, browser User-Agent and submission timestamp. These appear in the email body and help us detect spam and abuse.
Analytics (only with your consent)
If you accept analytics cookies, Google Analytics 4 collects an anonymised IP address, the pages you view, the referring site, device type and approximate country. No direct identifiers.
Why we collect it
To reply to your enquiries, improve the site content and detect abuse of the contact form.
Legal basis
Under GDPR Article 6 and the Kenya Data Protection Act 2019, we rely on:
- Consent for analytics cookies.
- Legitimate interest for processing contact form submissions and associated metadata for abuse detection.
How long we keep it
- Contact form emails: retained in our inbox indefinitely; you can ask for deletion at any time.
- Analytics data: 14 months (our configured GA4 retention).
Who we share it with
We share data with Google LLC, which processes it on our behalf to provide analytics. We do not sell data. We do not share with any other third parties except where legally required.
Cross-border transfers
Google Analytics data may be transferred to the United States. Google relies on the EU-US Data Privacy Framework and equivalent mechanisms for these transfers.
Your rights
You have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data ("right to erasure").
- Object to our processing of your data.
- Receive a copy of your data in a portable format.
- Lodge a complaint with a supervisory authority (e.g. the Office of the Data Protection Commissioner in Kenya, or your local EU supervisory authority).
How to exercise your rights
Email us at info@tibuafrika.org. We aim to respond within 30 days.
Cookies and similar technologies
| Name | Purpose | Duration |
|---|---|---|
_ga | Google Analytics visitor identifier (only after you accept analytics). | 2 years |
_ga_<property_id> | Google Analytics session state (only after you accept analytics). | 2 years |
tibuafrika.consent.v1 | Your consent choice (stored in browser localStorage, not a cookie). | Until you clear site data |
Changes to this policy
If we make material changes, we will update the "Last updated" date at the top of this page. For significant changes we may also surface a notice on the site.
Contact us about privacy
Tibu Afrika Consultancy Ltd
Nakuru, Kenya
Email: info@tibuafrika.org