Who we are
Pinch Africa is a Kenyan digital agency registered in Nairobi. Our registered office is at Dam Estate, Langata, House 233, Nairobi, Kenya. You can reach our data controller at pinch@pinch.africa.
What we collect
We collect only the data we need to run our business and serve clients:
- Contact information you provide via forms, email, WhatsApp or sales calls: name, email, phone, company, and whatever you choose to share about your business.
- Analytics signals from this website: anonymised IP, browser, device type, pages viewed, referrer. We use Google Analytics 4 with IP anonymisation enabled.
- Service data for active clients: project files, brand assets, ad-account access tokens, CRM contacts you upload. This is processed under a signed engagement agreement.
- Cookies — essential session cookies plus optional analytics cookies. See our Cookies Policy for the full list.
Why we process it
- To respond to your enquiry and quote work.
- To deliver the services you’ve hired us for.
- To improve this website and our services through aggregated, anonymous analytics.
- To meet our legal obligations (tax, accounting, KRA filings).
- To send service updates or, with your opt-in, marketing content. You can unsubscribe anytime.
Legal basis
Under the Kenya Data Protection Act (2019) and, where applicable, the GDPR, we rely on:
- Consent — for marketing emails, optional cookies, and form submissions.
- Contract — for client-service delivery.
- Legitimate interest — for security, fraud prevention, and improving our services.
- Legal obligation — for tax and regulatory record-keeping.
How we share data
We never sell your data. We share it only with these categories of processors:
- Infrastructure: cPanel hosting, Cloudflare, Google Workspace.
- Marketing platforms: Meta, Google Ads, TikTok Ads, LinkedIn — only when you’ve granted us access to your own accounts.
- Payment processors: bank, M-Pesa, Stripe (international card payments).
- Professional advisors: accountants and legal counsel, under confidentiality.
For international transfers (e.g. cloud storage in the EU/US) we rely on Standard Contractual Clauses and the processor’s certifications.
How long we keep it
- Active client data: for the life of the engagement plus seven years (tax retention).
- Sales enquiries that didn’t convert: 24 months, then deleted.
- Analytics: 14 months at Google Analytics, anonymised.
- Marketing list subscribers: until you unsubscribe.
Your rights
You can ask us, anytime, to:
- Confirm what data we hold about you.
- Correct anything inaccurate.
- Delete your data (subject to legal retention obligations).
- Export your data in a portable format.
- Object to processing for marketing purposes.
- Withdraw consent for any optional processing.
Send any request to pinch@pinch.africa. We’ll respond within 30 days. If we can’t resolve a concern you have the right to lodge a complaint with the Office of the Data Protection Commissioner in Kenya.
Security
We protect your data through HTTPS-only transport, encrypted storage, role-based access on internal systems, two-factor authentication on all admin accounts, regular backups, and annual security reviews. No system is ever perfectly secure, so if a breach affecting your data does occur we will notify you within 72 hours.
Children
This website is not directed to children under 18 and we do not knowingly collect their data.
Changes to this policy
We’ll post any material changes here and bump the “Last updated” date above. For substantial changes we’ll also email any subscriber list.
Contact
Questions about privacy? Email pinch@pinch.africa or write to: Pinch Africa, Dam Estate, Langata, House 233, Nairobi, Kenya.