Privacy policy

1. Who we are

This website is run by Truecrest Studio, Nairobi, Kenya (“we”, “us”). We are responsible for your personal data under the Kenya Data Protection Act 2019 and, for visitors in the EU and UK, the GDPR.

2. What we collect

• Quote and contact forms: your name, email, WhatsApp number if given, and what you tell us about your project.
• Free website review and downloads: your website address and email.
• Site statistics: pages visited, device type and approximate country, only if you accept analytics cookies.
• Messages: anything you send us by email or WhatsApp.

3. How we use it

To reply to your request, prepare quotes, deliver and support your project, and improve this website. Our legal basis is your request (steps before a contract), the contract itself, and your consent for analytics.

4. Who we share it with

Only the services we need to run the business: our web host and email provider (Hostinger), our security and spam-protection provider (Cloudflare), and Google Analytics if you consent. Some of these may store data outside your country under standard safeguards. We never sell your data.

5. How long we keep it

Enquiries that don’t become projects: 12 months. Client project records: as long as needed for the project and tax law, usually 7 years.

6. Your rights

You can ask to access, correct, delete or move your data, object to how we use it, or withdraw consent at any time. Email hello@truecreststudio.com. You can also complain to the Office of the Data Protection Commissioner (Kenya) or your local authority.

7. Cookies

We use essential cookies to make the site work, and analytics cookies only with your consent. Details are in our Cookie policy.

8. Security

Data is sent over HTTPS, stored on secured servers, and only we can access it. The site is maintained with tested updates, hardened logins and daily backups.

9. Contact us

Truecrest Studio · Nairobi, Kenya · hello@truecreststudio.com