This policy explains how Opero Services Ltd collects, uses, stores and protects personal information when you visit our website, contact us or subscribe to our updates.
It applies to visitors of opero-services.com and is governed by applicable data protection laws, including Kenya's Data Protection Act, 2019.
Who is responsible
Opero Services Ltd is the data controller responsible for personal information collected through this website.
For privacy-related enquiries or requests concerning your personal data, contact us at:
Opero Services Ltd
Wood Avenue Plaza, 9th Floor
Off Argwings Kodhek Road
Nairobi, Kenya
Email: info@opero-services.com
When you browse the site
Our hosting and network security providers process technical information necessary to deliver, maintain and secure the website. This may include your IP address, browser and device type, requested pages and access timestamps.
We use privacy-oriented, cookieless analytics to understand website traffic, including page views, referral sources and approximate geographical location. These analytics do not identify individual visitors or track them across other websites.
We do not use third-party advertising trackers, social media tracking pixels or externally hosted web fonts.
When you use the contact form
When you submit an enquiry, we collect the information you provide, including your name, email address, organisation (if provided), enquiry subject and message.
Enquiries are stored in Opero's business management system and delivered to authorised team members through our email systems. We use this information to respond to enquiries, manage correspondence and maintain appropriate business records.
Our forms include automated spam-prevention measures, including hidden fields and temporary request counters derived from IP addresses. These counters do not contain message content and expire within minutes.
When you subscribe to the newsletter
When you subscribe, we collect your email address to send you news, publications and updates about our work.
Subscriptions use a double opt-in process, requiring confirmation through an email sent to the address provided.
You may unsubscribe at any time using the link included in our newsletters. We will then stop sending subscription-based communications and remove or suppress your address as appropriate.
Security checks on our forms
We use Cloudflare Turnstile to protect public forms against spam and automated abuse.
Turnstile may process technical information, including IP addresses, browser characteristics, connection information and interaction signals, to distinguish legitimate visitors from automated traffic.
Cloudflare states that Turnstile does not collect the contents of form submissions. It may use cookies or similar storage where necessary for security purposes.
For more information, see Cloudflare's Turnstile Privacy Addendum .
When you email or call us
When you contact us directly by email or telephone, we process the information you provide to respond to your enquiry, communicate with you and maintain relevant business records.
These communications may be processed through our email and telecommunications service providers.
We retain correspondence only for as long as reasonably necessary for its purpose, applicable legal obligations and legitimate business requirements.
When you watch embedded videos
Some pages may contain videos hosted on YouTube.
Where available, we use YouTube's privacy-enhanced embedding mode to limit tracking before playback. However, Google may receive technical information, including your IP address and browser details, when an embedded player loads.
YouTube may process additional information when you interact with a video. This processing is governed by Google's privacy policies.
Links to other websites
Our website may contain links to partners, funders, publications and other external resources.
We are not responsible for the privacy practices of external websites. We encourage visitors to review the applicable privacy policies when leaving our website.
Cookies and similar technologies
We do not use advertising or marketing cookies, and our website analytics operate without cookies.
Essential security services, including Cloudflare Turnstile, may use cookies or similar technologies necessary to protect the website against automated abuse.
Embedded content, such as YouTube videos, may also use cookies or other storage technologies.
Where non-essential cookies or similar technologies require consent under applicable law, we will obtain that consent before enabling them.
We will update this policy if our use of cookies or tracking technologies changes.
Why we use personal information
We process personal information for the following purposes:
We do not sell personal information or use it for automated decision-making that produces legal or similarly significant effects.
- Operating, maintaining and securing our website.
- Responding to enquiries and managing correspondence.
- Maintaining business records and managing relationships.
- Sending newsletters and updates to subscribers who have opted in.
- Understanding aggregate website traffic and improving the visitor experience.
- Preventing spam, fraud and automated abuse.
- Meeting applicable legal and regulatory obligations.
When we share personal information
We may share personal information with trusted service providers where necessary to operate our website and business communications. These include providers of hosting, website security, analytics, business management systems, email and newsletter services.
Such providers process information in connection with the services they deliver, subject to applicable contractual and data protection obligations.
We may also disclose information where required by law, a court order or a lawful request from a competent regulatory or public authority.
We do not sell or rent personal information to third parties.
Legal bases for processing
We process personal information in accordance with Kenya's Data Protection Act, 2019, and other applicable data protection legislation.
Where the General Data Protection Regulation (GDPR) applies, our processing may rely on the following legal bases:
Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- Legitimate interests: Operating a secure website, responding to ordinary enquiries, managing business correspondence, preventing abuse and improving our services, provided these interests are not overridden by individual rights.
- Consent: Sending newsletters and using non-essential cookies or similar technologies where consent is required.
- Contractual necessity: Taking steps requested before entering into a contract or fulfilling contractual obligations.
- Legal obligations: Processing necessary to comply with applicable laws and regulatory requirements.
How long we keep personal information
We retain personal information only for as long as necessary to fulfil its intended purpose and meet applicable legal or business requirements.
Our retention practices include:
Information is deleted or anonymised when it is no longer required, unless continued retention is necessary for legal or legitimate business purposes.
- Technical and security logs: Retained for limited periods according to operational and security requirements and the retention practices of relevant service providers.
- Anti-abuse counters: Automatically expire within minutes.
- Contact form enquiries: Retained in our business management and email systems while necessary to manage enquiries, related activities and business records.
- Newsletter subscriptions: Retained while your subscription remains active. Limited suppression records may be retained after unsubscribing to prevent further unwanted communications.
- Direct correspondence: Retained while relevant to ongoing communications, business relationships or applicable recordkeeping obligations.
Your privacy rights
Subject to applicable law, you may have the right to:
To exercise your rights, email info@opero-services.com .
We may request reasonable information to verify your identity before responding.
You may also lodge a complaint with an appropriate data protection authority, including Kenya's Office of the Data Protection Commissioner (ODPC). Where applicable, you may contact the relevant supervisory authority in your jurisdiction.
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of information where legally appropriate.
- Object to or request restriction of certain processing activities.
- Withdraw consent where processing is based on consent.
- Request the transfer of your personal information where the right to data portability applies.
International data transfers
Some of our service providers operate internationally. Consequently, personal information collected through this website may be processed or stored outside Kenya or your country of residence.
Where applicable law requires safeguards for international transfers, we use appropriate legal and contractual measures, which may include standard contractual clauses or other recognised transfer mechanisms.
Children's privacy
Our website is intended primarily for professionals, organisations and other individuals interested in our work.
We do not knowingly collect personal information from children through this website.
If you believe a child has provided personal information to us, please contact us so that we can review the matter and take appropriate action.
Changes to this policy
We may update this policy to reflect changes in our website, services, data processing activities or applicable legal requirements.
The date at the top indicates when the policy was last reviewed.
For questions about this policy or how we handle personal information, contact info@opero-services.com .