Last Updated: December 2025
NairobiPostalCode.org (“we”, “our”, “us”) operates an informational website that helps users find Nairobi and nearby postal codes, post offices, and address-formatting guidance. This Privacy Policy explains how personal data is collected, used, stored, and protected in line with the Kenya Data Protection Act, 2019 and applicable international best practices.
If you have any questions about this Privacy Policy or want to exercise your data rights, use the contact details provided on our Contact page at https://nairobipostalcode.org/.
1. Data We Collect
Depending on how you use the site, we may collect the following categories of personal data:
Basic contact details that you choose to submit, such as your name, email address or phone number when you send us a message via forms or email.
Technical and usage data such as IP address, device type, browser type, pages visited, time spent, referring URLs, approximate location and other analytics data collected through cookies, log files and similar technologies.
Communication records such as messages you send via forms, email, or social media, and our responses.
The site is designed as an informational directory, so you are not required to create an account or provide any personal data to browse postal codes.
2. How We Use Your Data
Personal data is used only for legitimate, clearly defined purposes, including:
- Operating, maintaining, and improving NairobiPostalCode.org, including troubleshooting and enhancing content and user experience
- Responding to your enquiries, feedback, correction requests, or support messages sent via the Contact page or other channels
- Generating anonymised statistics and analytics about how the site is used, so we can understand which postal code pages are most popular and where users may experience issues
- Protecting the security of the website, detecting abuse, spam, or unauthorised access attempts
- Complying with legal obligations under Kenyan law or responding to lawful requests from regulators or law enforcement
Data is not sold to third parties. Where advertising, analytics or embedded services from third parties are used, they may process personal data as separate controllers under their own privacy policies.
3. Legal Basis for Processing
Under the Kenya Data Protection Act, 2019, processing of personal data must rely on a valid legal basis. Depending on the situation, the legal basis for processing your data may be:
Your consent, for example when you accept cookies beyond those strictly necessary or you choose to submit your contact details.
Performance of a task you request, such as answering your question, updating information, or processing a correction request.
Our legitimate interests in operating a useful, secure, and reliable informational website for the public, provided such interests are compatible with your rights and expectations.
Compliance with legal obligations under Kenyan data protection, consumer or other applicable laws.
Where consent is used as the legal basis, you can withdraw it at any time using your browser settings, cookie tools, or by contacting us via the Contact page.
4. Cookies and Tracking Technologies
NairobiPostalCode.org uses cookies and similar technologies to operate the site, remember your preferences, and analyse usage. A separate Cookie Policy provides more detail on the types of cookies, purposes, and your options to manage them.
On your first visit, the site may display a banner or notice explaining cookie use and asking you to accept or reject non-essential cookies in line with Kenyan practice and international standards such as the GDPR. You can change your cookie preferences at any time in your browser or device settings.
5. Data Sharing and Third Parties
Personal data may be shared in limited situations:
Service providers and technical partners (such as hosting companies, analytics providers, security providers, or email delivery services) that support the operation of the website and process data on our instructions and under confidentiality obligations.
Public authorities, regulators, or law enforcement agencies where required by Kenyan law or in response to lawful requests.
Professional advisers (for example legal or technical consultants) where reasonably necessary to protect our rights or handle disputes.
Where third-party tools like Google Analytics, search console, ad networks, or embedded services are used, they may collect and process data in accordance with their own policies. You are encouraged to review those external policies separately.
6. International Transfers
Because internet services and cloud hosting may involve servers in multiple countries, your data may be transferred outside Kenya. Where this happens, reasonable safeguards are used to protect personal data, for example secure transmission, access controls, and use of reputable service providers that implement appropriate technical and organisational measures.
7. Data Retention
Personal data is kept only for as long as necessary for the purposes described in this Privacy Policy or as required by law. In practice, this usually means:
- Contact form messages and email correspondence are kept for as long as needed to address your query and maintain appropriate records, then periodically reviewed and deleted or anonymised
- Analytics and log data are kept for a limited period to maintain security and understand site trends, then aggregated or anonymised wherever feasible
Retention periods may be adjusted where there is a legal obligation to keep data longer, for example in the context of disputes or regulatory requirements.
8. Your Data Protection Rights
Subject to conditions and exceptions in the Kenya Data Protection Act, you may have rights that include:
- Right to be informed about how your data is used
- Right of access to personal data held about you
- Right to request correction (rectification) of inaccurate or incomplete data
- Right to request deletion of personal data in appropriate circumstances
- Right to object to or restrict certain types of processing, including direct marketing or profiling
- Right to withdraw consent where processing is based on consent
To exercise any of these rights, please use the contact details on our Contact page at https://nairobipostalcode.org/. You may also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.
9. Children’s Privacy
NairobiPostalCode.org is intended for general audiences seeking postal information and is not specifically directed at children. If it becomes apparent that personal data of a child has been collected without appropriate consent or authority, reasonable steps will be taken to delete it.
10. Security
Reasonable technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, or misuse, such as secure hosting, access restrictions, and encryption where appropriate. However, no website or internet transmission is completely secure, so users should take care when sharing information online.
11. Updates to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in the law, our services, or how data is handled. The latest version will always be posted on NairobiPostalCode.org, and material changes may be highlighted on the site. By continuing to use the site after changes take effect, you agree to the updated Policy.
For the most current information or to contact us about privacy, always refer to the Contact page at https://nairobipostalcode.org/contact
Contact Us
For any privacy-related questions or to exercise your data protection rights, please visit our Contact page at https://nairobipostalcode.org/.