Trust is our whole positioning, so this policy is written to be read: what we collect, why we collect it, and what you can ask us to do about it.
Shupav Group is a marketing and technology agency based at Suite 1111, Applewood Adams, Ngong Rd, Kilimani, Nairobi, Kenya. For anything in this policy, the data controller is Shupav Group and the fastest route to us is hello@shupav.com.
Data you give us. When you fill in a form on this site, book a call, or apply for a role, we collect what you type: typically your name, email address, company, phone number and your message. We use it to do the thing you asked, respond to your enquiry, prepare for your call, or consider your application. Nothing else.
Data collected automatically. Like most websites, we collect basic analytics when you visit: the pages you view, the site that referred you, your device and browser type, and an approximate location derived from your IP address. We use this to understand what is working on the site and to fix what is not.
Data we do not collect. We do not run advertising trackers, we do not build advertising profiles, and we never sell personal data to anyone.
Forms on this site run on NairoCRM, the customer relationship platform built by Shupav Technologies. Your submission is stored there so the right person on our team can respond, and it stays inside our own systems. It is not shared with third-party marketing databases.
We process personal data in line with the Kenya Data Protection Act, 2019. Where visitors are covered by other regimes such as the GDPR, we apply the same standards of care.
Only the service providers needed to run this site and respond to you: our hosting provider, our email provider, and our own analytics tooling. Each processes data on our instructions. We disclose personal data beyond that only if the law requires it.
Enquiry and call-booking data is kept for as long as the conversation is live and for up to two years afterwards, in case you come back. Job applications are kept for one year unless you ask us to delete them sooner. Analytics data is retained in aggregate form only.
You can ask us, at any time, to:
Write to hello@shupav.com and we will respond within 30 days. If you believe we have handled your data badly, you also have the right to complain to the Office of the Data Protection Commissioner in Kenya.
This site uses a small number of cookies: those necessary for the site to function, and analytics cookies that help us understand how the site is used. We do not use advertising cookies. You can block or clear cookies in your browser settings at any time; the site will keep working.
NairoCRM and FirmStamp are products of Shupav Technologies with their own privacy policies, published on nairocrm.com and firmstamp.com. If you are a user of those products, those policies govern that data.
When we change this policy, we update the date at the top of this page. If a change meaningfully affects how we handle your data, we will say so plainly rather than bury it.
Short version: we collect what we need to respond to you, we keep it in our own systems, we do not sell it, and you can ask us to show it, fix it or delete it at any time.