PRIVACY POLICY

Bridging Efficiency in Niche Growing Kenyan Businesses Ltd
Trading as Being K Ltd | being-k.com

Last updated: May 2026

1. Introduction and Data Controller

Bridging Efficiency in Niche Growing Kenyan Businesses Ltd, trading as Being K Ltd (“Being K Ltd”, “we”, “us”, or “our”), is the data controller responsible for your personal information. Our registered office is at Nairobi Garage, 4th Floor, Delta Corner Annex, Ring Road, Westlands, Nairobi, Kenya.

Being K Ltd is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This policy applies when you visit being-k.com, submit any form on our website, purchase Standalone Services through our shop, engage with us for Tailored Services or Custom Solutions, or interact with us by email, phone, or any other channel.

This Privacy Policy is governed by the Data Protection Act (No. 24 of 2019) of Kenya (the “DPA 2019”). Where you access our services from the European Economic Area or the United Kingdom, the EU General Data Protection Regulation (GDPR) and UK GDPR respectively may also apply. Where those laws grant you stronger protections than this policy provides, those protections apply.

This policy should be read alongside our Terms and Conditions (being-k.com/terms-and-conditions/) and our Refund Policy (being-k.com/refund-policy/), both of which are incorporated by reference.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you provide to us when you interact with Being K Ltd, including:

Contact information: your name, email address, phone number, business name, and job title, provided when completing contact forms, booking a Discovery Call, or corresponding with us.
Purchase information: billing name, email address, and billing address provided when purchasing Standalone Services through our shop.
Payment information: credit or debit card details when making a purchase. We do not store your payment card information. All payment data is processed securely by our third-party payment gateway and is subject to that provider’s security standards.
Account details: if you create an account on being-k.com, your username, password, and registration information.
Brief and project information: business details, goals, brand assets, and other information you share with us during onboarding, Discovery Calls, or in the course of service delivery.
Communications: records of your correspondence with us by email, phone, or through our website forms.

2.2 Information Collected Automatically

When you visit being-k.com, we and our third-party service providers automatically collect certain information, including:

Log data: your IP address, browser type and version, operating system, referring URLs, pages viewed, links clicked, and the date and time of your visit.
Device information: details about the device you use to access our website, including hardware model and operating system version.
Cookie and tracking data: information collected through cookies and similar technologies, subject to your consent preferences managed through our CookieYes consent management platform. See Section 8 for full details.

3. Lawful Basis for Processing

Being K Ltd processes your personal data on the following lawful bases, as required by the DPA 2019 and, where applicable, the GDPR and UK GDPR:

Contract: we process your personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This covers processing related to service delivery, order fulfilment, payment processing, and client communications.
Consent: we process your personal data for marketing communications and non-essential cookies where you have given us your explicit, freely given, and informed consent. You may withdraw your consent at any time (see Section 7).
Legitimate interests: we process certain data, such as website log data and security information, where it is in our legitimate interests to operate and improve our website and protect our business, provided those interests are not overridden by your rights and freedoms.
Legal obligation: we process personal data where we are required to do so by applicable law, including Kenyan law and any applicable international obligations.

4. How We Use Your Information

Being K Ltd uses the personal information we collect for the following purposes:

Service delivery: to fulfil your orders, respond to enquiries, deliver Standalone Services, and manage Tailored Services and Custom Solutions engagements.
Payment processing: to manage payments, issue refunds, and send order confirmations.
Client onboarding and communication: to send onboarding forms, manage Discovery Calls, share proposals, and communicate with you throughout your engagement with us.
Account management: to create and manage your account on being-k.com where applicable.
Marketing and communications: to send you newsletters, promotional materials, and relevant offers, where you have given your consent or where we have a legitimate interest in doing so and you have not opted out.
Website improvement: to analyse usage trends, diagnose technical issues, and improve the performance and user experience of being-k.com.
Legal compliance: to comply with our obligations under the DPA 2019 and other applicable laws, and to respond to lawful requests from public authorities including the Office of the Data Protection Commissioner (ODPC).
Security: to detect, prevent, and address fraud, security incidents, and other harmful or unlawful activity.

5. How We Share Your Information

Being K Ltd does not sell your personal information. We may share your data with the following categories of third parties, strictly for the purposes described in this policy:

Payment processors: our payment gateway provider processes your payment card information securely on our behalf. We do not receive or store your full card details.
Hosting and infrastructure providers: the providers that host being-k.com and our associated systems and databases.
Email marketing platforms: the platforms we use to send newsletters and marketing communications to clients who have consented to receive them.
Analytics providers: tools that help us understand how visitors use being-k.com, including traffic analysis and performance monitoring.
Consent management: CookieYes, our cookie consent management platform, which manages and records your cookie preferences on our behalf.
Project management and communication tools: platforms our team uses to manage client projects and internal communications, which may process client information shared during service delivery.
Legal and regulatory authorities: we may disclose your information where required by applicable law, a court order, or a competent regulatory or governmental authority, whether in Kenya or elsewhere.
Business transfers: in the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the new owner as part of that transaction. We will notify you of any such transfer and any choices you may have.

All third-party service providers who process personal data on our behalf are required to handle that data in accordance with applicable data protection law and are only permitted to process your data for the specific purposes we have instructed.

6. International Data Transfers

Being K Ltd is incorporated and operates in Kenya. If you access our website or engage our services from outside Kenya, your personal data will be transferred to and processed in Kenya.

If you are located in the European Economic Area or the United Kingdom, please be aware that Kenya is not currently recognised by the European Commission or the UK Information Commissioner’s Office as providing an equivalent level of data protection to the EEA or UK. Where we transfer your personal data internationally, we take appropriate steps to ensure that your data is protected in a manner consistent with the GDPR and UK GDPR, including by relying on appropriate safeguards such as standard contractual clauses or your explicit consent to the transfer.

For further information about the safeguards we apply to international data transfers, or to request a copy of the relevant transfer mechanisms, please contact us at contact@being-k.com.

7. Data Security

Being K Ltd takes appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL encryption for data transmitted through our website and payment gateway, access controls limiting who within our team can access personal data, and confidentiality obligations on team members and contractors.

No method of transmission over the internet or electronic storage is completely secure. While we take our data security obligations seriously and apply industry-standard protections, we cannot guarantee the absolute security of your personal data.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Being K Ltd will notify the Office of the Data Protection Commissioner (ODPC) within 72 hours of becoming aware of the breach, as required by the DPA 2019. Where the breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay.

8. Data Retention

Being K Ltd retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with our legal, accounting, and regulatory obligations. The criteria we use to determine retention periods include:

Client and transaction data: retained for a minimum of 7 years following the end of a client engagement or transaction, to comply with Kenyan tax and accounting requirements.
Contact and enquiry data: retained for up to 2 years from the date of last contact, unless you have entered into a service engagement with us, in which case the client data retention period applies.
Marketing data: retained until you withdraw your consent or opt out of marketing communications, whichever is earlier.
Website log and analytics data: retained for up to 26 months from the date of collection, or in accordance with the retention settings of our analytics providers.
Cookie consent records: retained by CookieYes for as long as required to demonstrate compliance with applicable data protection law.

You may request deletion of your personal data at any time by contacting us at contact@being-k.com. We will assess your request and respond within 30 days. Please note that we may be required to retain certain data to comply with legal obligations even after you request deletion.

9. Your Data Rights

Depending on your location and the applicable data protection law, you have the following rights in relation to your personal data:

Right of access: you have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to correction: you may request that we correct any inaccurate or incomplete personal data we hold about you.
Right to deletion: you can request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where we have no other lawful basis for retaining it.
Right to restrict processing: you may request that we limit the way we use your personal data in certain circumstances, for example while a correction request is being assessed.
Right to object: you have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis, and where our processing affects your rights and freedoms.
Right to data portability: where we process your data based on your consent or to perform a contract, and the processing is carried out by automated means, you may request that we provide your personal data to you in a structured, commonly used, and machine-readable format.
Right to withdraw consent: where we process your personal data on the basis of your consent (including for marketing communications and non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to opt out of marketing: you may opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any marketing email or by contacting us at contact@being-k.com.

To exercise any of the above rights, please contact us at contact@being-k.com. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

If you are based in Kenya, you also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe we have not handled your personal data in accordance with the DPA 2019. The ODPC can be contacted at odpc.go.ke.

If you are based in the European Economic Area, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence. If you are based in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

10. Cookies and Consent Management

Being K Ltd uses cookies and similar tracking technologies on being-k.com for functional, analytical, and marketing purposes. Cookies are small text files placed on your device when you visit our website.

10.1 Cookie Categories

We use the following categories of cookies:

Strictly necessary cookies: essential for the website to function correctly. These cookies do not require your consent and cannot be disabled through our consent management platform.
Analytical cookies: help us understand how visitors interact with being-k.com by collecting information about pages visited, time spent on site, and traffic sources. These cookies are only placed with your consent.
Marketing and advertising cookies: used to deliver relevant content and advertisements based on your interests and browsing behaviour. These cookies are only placed with your consent.
Functional cookies: enable enhanced functionality and personalisation on the website. These cookies are placed with your consent.

10.2 CookieYes Consent Management

We use CookieYes as our cookie consent management platform. When you visit being-k.com for the first time, CookieYes will present you with a consent banner allowing you to accept, decline, or customise your cookie preferences by category. Your preferences are recorded by CookieYes and applied to your subsequent visits.

You may update or withdraw your cookie consent at any time by clicking the cookie preferences link on our website or by adjusting your browser settings to refuse cookies. Please note that disabling certain cookies may affect the functionality of parts of being-k.com.

CookieYes processes cookie consent data on our behalf as a data processor. For more information about how CookieYes handles data, please refer to the CookieYes privacy policy at cookieyes.com.

11. Children’s Privacy

Being K Ltd’s website and services are not directed at or intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected personal data from a child under 18, please contact us immediately at contact@being-k.com and we will take prompt steps to delete that information.

12. Third-Party Links

being-k.com may contain links to external websites operated by third parties. Being K Ltd has no control over the content, privacy practices, or terms of those websites and accepts no responsibility for them. We encourage you to review the privacy policy of any third-party website you visit before providing any personal information.

13. Changes to This Policy

Being K Ltd may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. When we make material changes, we will update the last updated date at the top of this page and, where appropriate, notify you by email or through a notice on our website.

Your continued use of being-k.com after any changes to this policy constitutes your acceptance of the updated version. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how Being K Ltd handles your personal data, please contact us at:

Company: Bridging Efficiency in Niche Growing Kenyan Businesses Ltd (t/a Being K Ltd)
Address: Nairobi Garage, 4th Floor, Delta Corner Annex, Ring Road, Westlands, Nairobi, Kenya
Email: contact@being-k.com
Phone: +254 719 299255
Website: being-k.com

We will respond to all data-related requests within 30 days of receipt.