Privacy Policy

DISI Group ("we", "us", or "our") is committed to safeguarding your personal data. As a registered and certified Data Controller and Data Processor under the Office of the Data Protection Commissioner (ODPC) of Kenya, we collect, process, and store your data in full compliance with the Data Protection Act, 2019.

We have adopted this Privacy Policy, which determines how we are processing the information collected, use, disclose, and protect your personal data when you interact with our website and related services.

Personal information we collect:

When you visit www.disigroup.com, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages you view, what websites or search terms referred you to the Site, and how you interact with the Site. Moreover, we may collect the following categories of personal data when you use our website.

• Contact Information: name, email address, phone number

• Business Information: organization name, role, and industry

• Technical Data: IP address, browser type, operating system, and usage logs

• Communication Data: inquiries, feedback, or correspondence submitted via forms

• Cookies and Tracking: via analytics tools such as Google Analytics

Why do we process your data?

Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.

You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website’s features, or you wish to receive our newsletter or provide other details by filling a form, you may provide personal data to us, such as your email, first name, last name, city of residence, organization, telephone number. Users who are uncertain about what information is mandatory are welcome to contact us via info@disigroup.com.

How We Use Your Information

We use the data collected to:

• Respond to your inquiries or contact requests

• Provide and manage our services

• Improve website functionality and user experience

• Send relevant updates or promotional communications (only if consented)

• Comply with legal and regulatory obligations

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law. Once no longer needed, we securely delete or anonymize the data.

Your rights:

As a data subject, you have the following rights:

• Right to Access – request a copy of your personal data

• Right to Rectification – request correction of inaccurate data

• Right to Erasure – request deletion of your data, where applicable

• Right to Object – object to processing based on legitimate interests

• Right to Data Portability – request transfer of your data in a structured format

• Right to Withdraw Consent – at any time where consent is the basis for processing

If you would like to exercise this right, please contact us through the contact information below.

Links to other websites:

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

Information security:

We secure information you provide in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We implement appropriate technical and organizational measures to protect personal data from unauthorized access, modification, disclosure, loss, or destruction. These include:

• Encrypted communication (HTTPS)

• Role-based access control

• Regular system audits and vulnerability checks

Legal disclosure:

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Contact information:

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to info@disigroup.com.