Privacy policy

Who is responsible

Inflection Africa is published by Acme Value Options Ltd, the controller of personal information processed for operating this website and responding to its readers. Contact info@inflection.africa about privacy or to exercise your rights.

Applicable law

This notice describes our approach under Kenya’s Data Protection Act, 2019 and its applicable regulations. The EU General Data Protection Regulation (GDPR) also applies where its territorial and other legal conditions are met; visiting a Kenyan website from Europe does not by itself determine every GDPR obligation.

Information we receive

When you visit, our hosting and security services receive technical information such as your IP address, requested pages, timestamps, browser details, referring pages where supplied, and error or security events. Essential cookies support sessions and request security. Search requests include the terms you enter, which may appear in technical access logs; do not put sensitive personal information into search. When you email us, we receive your address, message and any information you choose to include. You are not required to submit personal information to read public articles, but we may need sufficient contact details to respond to an enquiry.

Why we use it

We use technical information to deliver pages, maintain security, investigate faults and prevent abuse. We use correspondence to answer enquiries, consider story ideas, review corrections and manage rights requests. Depending on the activity, processing relies on legitimate interests in operating a secure publication, steps requested by you, a legal obligation, or consent where it is required. You may withdraw consent for processing that relies on it without affecting earlier lawful processing.

Service providers and disclosure

Hosting, email and security providers process information to provide their services. Cloudflare delivers and protects the site and may receive network error reports from supported browsers. Information may also be disclosed when lawfully required or necessary to address a legal claim. We do not operate a sale of reader profiles or an advertising-tracking service through this website.

International processing

Technical information and correspondence may be processed outside your country by our hosting, security and email providers. Applicable data-protection requirements govern these transfers. Transfers must meet applicable Kenyan safeguards. Where GDPR governs a transfer, an applicable adequacy decision, appropriate safeguards such as approved contractual clauses, or another lawful transfer condition must support it. You may ask about the safeguards relevant to your information.

Retention and security

Information is kept for as long as needed for its purpose, including handling an enquiry, maintaining security or meeting legal obligations. Retention depends on the type of record and service; the two-hour session-cookie lifetime does not mean all server logs or correspondence are deleted after two hours. Access should be limited to those who need it. No website or email system can guarantee absolute security.

Your rights

Subject to applicable law, you may request information about how your data is used, access it, object to processing, or seek correction or deletion. Some requests may be limited by legal duties, the rights of others or applicable journalism protections. We may need proportionate verification of your identity. You can also raise a concern with Kenya’s Office of the Data Protection Commissioner.

Additional GDPR rights where applicable

Where GDPR applies, you may also request restriction of processing and, when its conditions are met, receive or transmit eligible data in a portable form. You may object to processing based on legitimate interests and to direct marketing; withdrawal of consent is available when consent is the basis. Erasure and other rights are subject to lawful exceptions, including freedom of expression and information and the establishment or defence of legal claims.

We will respond without undue delay and within the applicable legal period. For GDPR rights requests, the usual period is one month; where a lawful extension is needed because of complexity or number of requests, we will explain it within that first month. You may complain to the competent European supervisory authority where applicable, as well as Kenya’s ODPC for matters within its remit.

Editorial information and automated decisions

Information used in reporting may come from sources, interviews, documents and public records, as well as from the person concerned. Requests involving journalism are considered alongside applicable public-interest and freedom-of-expression protections. The current public website does not make decisions about readers with legal or similarly significant effects solely through automated processing.

Audio and external links

Read-aloud uses your browser or device’s speech service. Some voices process text remotely under that provider’s terms; selecting a locally installed voice may avoid that processing. Links to other sites are governed by those sites’ privacy practices. We do not control their processing.

Children and sensitive information

The site is a general news publication. Please avoid sending unnecessary information about children or sensitive personal matters. Contact us if you believe such information has been supplied inappropriately.

Changes and contact

We will revise this notice when our practices change and show its updated date. See the cookie policy for current cookie details.

Legal references: Kenya’s ODPC guidance on individual rights and the EU GDPR.