Last updated 10 November 2026

Privacy Policy

This policy explains what personal data we collect when you visit cybershelf.net, why we collect it, and the rights you have over it under Kenya’s Data Protection Act, 2019.

Who we are

Cybershelf Limited (“Cybershelf”, “we”, “us”) is the data controller for the personal data described here. You can contact us about anything in this policy at aroni@cybershelf.net.

What we collect and why

Website analytics (one first-party cookie)

We use PostHog to understand how visitors use this website and to test different versions of our pages. PostHog sets a single first-party cookie on cybershelf.net, with a name beginning ph_. It holds a random identifier, so we can recognise a return visit, keep showing you the same version of a page, and tell whether a visit led to a booked Free Assessment.

With it we record the pages you view, the buttons you click (such as “Book a Free Assessment” or WhatsApp), the version of a page you saw, your approximate location derived from your IP address, and your browser and device type. We use this only to improve the website. Our lawful basis is our legitimate interest in understanding and improving our website. The cookie lasts up to one year. PostHog also keeps a little information about the current visit in your browser’s session storage, which is cleared when you close the tab.

Booking a Free Assessment (Cal.com)

When you book a Free Assessment, the booking form, provided by Cal.com, asks for your name, your firm’s name, your email address and your phone or WhatsApp number. It may also ask which Task you would most like to hand over. We use these details to arrange and hold the call and to follow up with you about it. Our lawful basis is taking steps at your request before entering into a contract. Cal.com may set cookies that the booking form needs to work. We do not use them for tracking or advertising.

Contacting us on WhatsApp or by email

If you message us on WhatsApp or email us, we receive your phone number or email address, your name as you have set it, and what you send us. We use it to reply to you. WhatsApp is operated by Meta, and its own privacy policy applies to your use of WhatsApp.

What we do not do

• We do not use advertising pixels or advertising cookies.
• We do not use third-party tracking cookies.
• We do not sell your personal data or share it for advertising.

Who processes your data for us

We use a small number of service providers to run this website and our bookings: Vercel (website hosting), PostHog (analytics, hosted in the European Union) and Cal.com (booking). Some of them store data outside Kenya. We only use providers whose data protection terms give your data the safeguards the Data Protection Act, 2019 requires for transfers outside Kenya. WhatsApp is not one of our providers: Meta runs it under its own privacy policy.

How long we keep it

Analytics data is kept for up to two years. Booking and contact details are kept for as long as we are in touch with you about our work, and deleted within two years of our last contact unless the law requires us to keep them longer.

Your rights

Under the Data Protection Act, 2019, you have the right to:

• be informed of how your personal data is used;
• access the personal data we hold about you;
• object to the processing of all or part of your personal data;
• have your data corrected or deleted if it is inaccurate, out of date, incomplete or misleading, or if we no longer have a lawful reason to keep it;
• ask us to restrict how we use your data while a concern is looked into;
• not be subject to decisions made solely by automated means that significantly affect you (we make no such decisions);
• receive your data in a portable format, where this applies.

To use any of these rights, email aroni@cybershelf.net. We will respond as soon as we can, and in any case within the time limits set by the Data Protection (General) Regulations, 2021. You can also block or delete cookies in your browser settings. The website still works without the analytics cookie.

If you are unhappy with how we have handled your data, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.

Changes to this policy

We will update this page if the way we use personal data changes, and change the date at the top when we do.