Privacy Policy

Who we are

Loyca Limited is the data controller for personal data collected through this website.

Contact: loycaofficial@gmail.com or +254 740 658 068.

What we collect, and why

Only what you send us. This site has no account system, no profiling and no advertising trackers.

Enquiry, quote and callback forms. Your name, email, phone, organisation, role and whatever you write in the message or scope fields. We use it to answer your enquiry and nothing else.
Newsletter. Your email address, on a double opt-in basis. This list is never merged with enquiry data, because the lawful basis differs.
Consent record. When you submit a form we record the consent text you agreed to and the timestamp, which is what makes the consent defensible.
Analytics. Only if you opt in. See the cookie policy.

Lawful basis

Consent for the newsletter and for analytics. For enquiries, consent together with our legitimate interest in responding to a request you initiated. You can withdraw consent at any time; withdrawing it does not affect the lawfulness of processing already carried out.

Who else sees it

Cloudflare — hosting, and the Turnstile bot check on our forms. Turnstile sets no third-party cookies.
Our email provider — to deliver your enquiry to us and our reply to you.
Brevo — newsletter delivery, if you subscribe.

We do not sell personal data and we do not share it for advertising.

International transfers

Our hosting and email providers process data outside the country you are in. Where that happens we rely on the safeguards permitted by the applicable privacy law. Ask us and we will tell you which providers and which regions.

How long we keep it

Enquiries: for as long as needed to answer them and to keep a record of the engagement or decision not to engage. Newsletter: until you unsubscribe. Consent records: for as long as we rely on that consent.

Your rights

Under the GDPR and equivalent privacy law you may ask us to:

tell you what personal data we hold about you, and give you a copy
correct anything inaccurate
delete it, where we have no continuing basis to keep it
stop or restrict processing
port it to another controller, where technically feasible
object to processing based on legitimate interest

Email loycaofficial@gmail.com and we will respond within the statutory timeline. If you are not satisfied you can complain to the data protection supervisory authority for your country.

Breach notification

If a personal data breach presents a real risk to you, we will notify the competent supervisory authority within 72 hours of becoming aware of it and tell you in writing. We hold a written playbook for this.

Changes

We will note material changes on this page. It has no effective date yet because it is pending legal review.