Your information.
Handled with care.

Decra Kerubo operates this website and is responsible for the personal data described in this notice. For privacy questions or requests, email decrakerry@gmail.com with “Privacy request” in the subject line.

• Messages and enquiries: your name, email address, organisation and anything you include in a message, so Decra can respond and follow up.
• Consultation requests: contact and organisation details, your selected time, the consultation type and the context you provide. Booking records and related lead details are stored in the site’s Supabase database and used to review, arrange and manage the request.
• Payments: where you choose to pay online, Paystack processes the payment. The site receives a payment reference and verification result; it does not receive or store your full card details. If you pay by transfer, we receive the reference you submit.
• AI chat: messages and chat history are sent to the AI service configured for the site to generate replies. The service is currently configured to use Google Gemini when no alternative provider is set. Please do not enter confidential client information, passwords, payment credentials or sensitive personal data into the chat.
• Requested resources: when you request the AI Readiness Guide, we collect your name and email, keep a subscriber record, and email you the guide and related response.
• Optional site analytics: only if you choose “Allow all”, we record your IP address, approximate country (when available from the hosting network), pages visited, visit times and active time on each page while it is visible. If you submit an email while that browser choice is active, we associate that email with the browser’s visit history. Decra may add a name to a browser record when she independently recognizes the visitor. IP addresses can be shared by several people, so an IP is not proof of who used a device.
• Optional approximate location: when you choose “Allow all” and your browser grants location access, we collect a one-time device location to identify the visitor’s approximate area. Coordinates are rounded to about 100 metres before storage, kept for up to 90 days after the latest visit, and deleted when you choose “Essentials only.” If Decra opens a saved location in an external map, that map provider receives the approximate coordinates.
• Basic technical data: the website host and security systems may process technical details such as IP address, browser and request information to deliver, secure and troubleshoot the site, whether or not you allow optional analytics.

Some optional details can be left blank. If you do not provide information needed for a reply, booking or payment, we may be unable to complete that request.

We use personal data to respond to your request and take steps you ask us to take before an engagement; provide and administer a consultation or other agreed service; send a resource you requested; meet applicable legal obligations; protect the website and handle disputes; and, where required, rely on your consent. We use information only for purposes connected to the interaction that collected it.

Information is shared only as needed with the services that help operate this website: its hosting and security providers, Supabase for booking, lead and resource records, the configured email delivery provider, Paystack when you choose online payment, and the configured AI provider when you use the chat. Those providers process information to provide their services. Some may process data outside Kenya; where that happens, applicable Kenyan transfer requirements and safeguards apply.

We may also disclose information where required by law or needed to establish, exercise or defend legal claims. We do not sell personal data.

Optional visit, email-link, approximate-location and manually added visitor-name records use a 90-day rolling retention window based on the browser’s latest visit; records older than 90 days are removed during subsequent analytics or admin activity. Other information is kept only as long as reasonably needed for the purpose it was collected, including handling your request, maintaining engagement and payment records, meeting legal or accounting requirements, and resolving disputes. When it is no longer needed, it is deleted or de-identified where practicable. You can ask us about the retention of a particular record.

Under Kenyan data protection law, you may ask to be informed about how your data is used, access it, correct inaccurate or misleading information, request deletion where applicable, object to processing, seek restriction, and request portability where the law provides for it. Where processing relies on consent, you may withdraw that consent. These rights may be subject to legal exceptions.

Write to decrakerry@gmail.com. We may ask for enough information to verify your identity before acting on a request. You may also raise a concern with Kenya’s Office of the Data Protection Commissioner.

This site uses browser storage for your theme preference and temporary form or conversation state. “Allow all” enables optional analytics and asks your browser for permission to share one approximate location, saved once rather than tracked continuously. If you opt in, a consent cookie and random browser identifier let us count page visits and associate them with an email you submit. You can change your choice at any time below; choosing “Essentials only” withdraws optional consent and deletes the visit, email-link, visitor-name and location records held for that browser when the request reaches our server. These tools are not used to build an advertising profile. Paystack and other third-party services may use their own technologies when you interact with them. Links to other websites are governed by their own privacy notices.

Change cookie settings

We use HTTPS for the site, keep service credentials on the server rather than in browser code, and rely on access controls and security measures provided by our hosting, database, payment and AI providers. Access is limited to what is needed to handle your request. No internet transmission or storage system can be guaranteed completely secure.

This notice may be updated as the site or its services change. The effective date above shows when the current version was published.