On this page
Effective date: 1 June 2025
Kiri Cyber Services is committed to protecting your privacy. This policy explains what we collect, why we collect it, and the choices you have when you use our website, request a quote, purchase products, or engage our professional services.
Introduction
This Privacy Policy applies to visitors and clients of Kiri Cyber Services ("Kiri Cyber Services", "we", "us", or "our"), a cybersecurity and digital services company based in Kampala, Uganda. By using our website or services, you acknowledge that you have read and understood this policy.
Information we collect
Depending on how you interact with us, we may collect:
- Identity and contact data — such as your name, email address, phone number, company name, job title, and the content of messages you submit through contact forms, quote requests, checkout, or support channels.
- Transaction data — order details, billing references, and payment status. Card and mobile-money details are processed by our payment partners; we do not store full payment credentials on our servers.
- Technical and usage data — IP address, browser type, device information, pages viewed, referral source, and general interaction data collected through cookies or analytics tools.
- Administrative data — information relating to authorized staff accounts on our internal CMS and admin systems.
How we use your information
We use personal information to:
- Respond to enquiries, quotes, consultations, and support requests
- Deliver contracted services, digital products, and project deliverables
- Process payments and maintain accurate business records
- Improve website performance, security monitoring, and user experience
- Send service-related notices, invoices, and project updates
- Meet legal, regulatory, and fraud-prevention obligations
Legal basis for processing
Where applicable, we rely on one or more of the following grounds: your consent, performance of a contract, our legitimate interests in operating and securing our business, and compliance with legal obligations under Ugandan and other applicable law.
How we share information
We do not sell your personal information. We may share data with trusted processors that help us operate our business, including hosting providers, email services, analytics platforms, and payment gateways. These parties may only use data as instructed by us and must apply appropriate safeguards.
We may also disclose information where required by law, court order, or to protect the rights, safety, and security of our clients, staff, and systems.
International transfers
Some of our service providers may process data outside Uganda. Where this occurs, we take reasonable steps to ensure appropriate contractual and security protections are in place.
Data retention
We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. When data is no longer required, we delete or anonymize it using reasonable measures.
Security
We implement administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. No online transmission or storage system can be guaranteed to be completely secure.
Your rights
Subject to applicable law, you may have the right to request access to, correction of, deletion of, or restriction on the processing of your personal data, and to object to certain processing activities. To exercise these rights, contact us using the details below. We may need to verify your identity before responding.
Cookies and analytics
Our website may use cookies, local storage, and similar technologies for essential functionality, security, analytics, and preference management. You can manage cookies through your browser settings. Disabling certain cookies may affect site functionality.
Third-party links
Our website may contain links to third-party websites or services, including partner portals and passport application resources. We are not responsible for the privacy practices of those external sites and encourage you to review their policies separately.
Children's privacy
Our services are not directed to individuals under 16 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the effective date above. Material changes may also be communicated through our website or by direct notice where appropriate.
Contact us
For privacy-related questions, requests, or complaints, please contact Kiri Cyber Services through our Contact page or by email at info@kiricyberservices.com.
Questions about this document?
If you have questions about how we handle your data or would like to exercise your privacy rights, our team is here to help.