Privacy Policy

Novis Intelligence Ltd is a trading name of Novis Intel Ltd, a company incorporated in Kenya. Our principal place of business is Nairobi, Kenya.

For the purposes of the Kenya Data Protection Act 2019 (DPA 2019), Novis Intel Ltd is the data controller for personal data collected through this website (novisintel.com).

Contact: legal@novisintel.com

We collect personal data only where you provide it to us directly or where it arises from your use of this website.

Enquiry and contact forms: name, email address, company name, job title, and the content of your message. Used to respond to your enquiry and to understand the nature of your organisation's compliance requirements.

Demo requests: the same fields as above, plus details about your institution type and regulatory context. Used to prepare a relevant demonstration and to qualify the engagement.

Website analytics: aggregated and anonymised usage data (pages visited, referral source, session duration). We do not use cookies that identify you personally. No tracking pixels or third-party advertising scripts are deployed on this website.

Email correspondence: where you email us directly, we retain that correspondence as part of our client and prospect records.

Under the DPA 2019, we process your personal data on the following bases:

Legitimate interests: responding to business enquiries, maintaining records of prospective and current client relationships, and operating our website securely.

Consent: where you have explicitly provided consent (for example, by submitting a contact form with an opt-in to further communications).

Contractual necessity: where processing is required to fulfil or negotiate a contract with your organisation.

We do not sell personal data. We do not share personal data with third parties for marketing purposes.

Enquiry and contact data is retained for a period of 36 months from the date of last contact, or for the duration of a client engagement plus 7 years (in line with standard financial services record-keeping practice), whichever is longer.

Where you request deletion of your data and no legal obligation requires us to retain it, we will action that request within 30 days.

Our website infrastructure is hosted on Vercel (static site delivery via CDN). Vercel operates data centres in multiple regions. Where personal data is processed outside Kenya, we ensure that appropriate safeguards are in place in accordance with DPA 2019 Part VII (Restrictions on Transfer of Personal Data Beyond Kenya).

We do not transfer personal data to countries that the Office of the Data Protection Commissioner has not recognised as providing adequate protection without first putting appropriate contractual safeguards in place.

As a data subject under the Kenya Data Protection Act 2019, you have the following rights:

Right of access — to request a copy of the personal data we hold about you. Right to rectification — to request correction of inaccurate or incomplete data. Right to erasure — to request deletion of your personal data, subject to legal retention obligations. Right to restriction of processing — to request that we limit how we use your data in certain circumstances. Right to data portability — to receive your data in a structured, machine-readable format. Right to object — to object to processing based on legitimate interests.

To exercise any of these rights, contact: security@novisintel.com

We will respond within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days and will notify you accordingly.

We implement technical and organisational measures appropriate to the risk of the processing activities carried out on this website. These include HTTPS encryption for all data in transit, access controls on internal systems, and regular review of our data handling practices.

For security disclosures or to report a data breach, contact: security@novisintel.com

If you believe we have not handled your personal data in accordance with the DPA 2019, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC).

We would, however, ask that you contact us first at legal@novisintel.com so that we have the opportunity to address your concern before you escalate to the regulator.

We may update this privacy policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last revised. Material changes will be communicated to active contacts by email.