This policy explains how Kitocha ("Kitocha", "we", "us") handles your personal information when you use kitocha.com and our services. We are a technology business based at ERF 729 Kahimemua Nguvauva Street, Academia, Windhoek, Namibia, serving customers in Namibia and Kenya. We are in the process of formally registering our company and will update this policy with our registered details once that is complete.
1. Information we collect
- Account details: your name, email address, phone number, billing address and password (stored only as a one-way hash).
- Domain registration details: the contact details of the domain owner, which registries and registrars require in order to register a domain.
- Orders and billing: what you buy, your order and invoice history, and payment status. We do not store card numbers.
- Enquiries: anything you send us through the contact form or by email.
- Technical data: your IP address, browser type, device and the pages you visit, collected through server logs and cookies.
- Referrals: if you arrive through a referral link, we remember the referral code so the referrer can be credited.
2. How we use it
- To register, renew and transfer domains, set up hosting and email, and deliver what you order.
- To issue invoices, take payment and keep our financial records.
- To send service messages such as renewal reminders, invoices and security notices.
- To answer your questions and provide support.
- To keep our systems secure, prevent fraud and abuse, and meet legal obligations.
We do not send marketing email unless you have agreed to it, and you can opt out at any time.
3. Who we share it with
We do not sell your personal information. We share it only where needed to provide our services:
- Domain registries and registrars, who process domain registrations. Some owner details may appear in public WHOIS records unless privacy protection applies.
- Service providers that help us run the service, such as hosting, email delivery, payment and infrastructure providers, who may only use it on our behalf.
- Authorities and advisers, where the law requires it or to protect our rights.
4. International transfers
Registries and providers we work with may be located outside Namibia and Kenya. When your information is sent abroad we take reasonable steps to make sure it is still protected.
5. Cookies
We use cookies that are necessary for the site to work: keeping you signed in, holding your cart, protecting forms and remembering a referral code. You can block cookies in your browser, but parts of the site may then stop working.
6. How long we keep it
We keep your information for as long as your account is active and as long afterwards as we need it for accounting, legal and security reasons. When it is no longer needed we delete or anonymise it.
7. Security
We use encryption in transit, hashed passwords and access controls. No system is completely secure, so please use a strong, unique password and tell us straight away if you think your account has been accessed without permission.
8. Your rights
You can ask us to show you the personal information we hold about you, correct it, or delete it, and you can object to how we use it or withdraw consent you have given. Email support@kitocha.com and we will respond as quickly as we can. Some information, such as domain owner details and invoices, must be kept to meet registry and legal requirements. You may also contact the data protection authority in your country if you have a concern.
9. Children
Our services are not meant for anyone under 18 and we do not knowingly collect information about children.
10. Changes to this policy
We will update this page when our practices change, and when our company registration is complete. The date at the top shows when it was last updated. For significant changes we will notify account holders by email.
11. Contact us
Questions about your privacy? Email support@kitocha.com or write to Kitocha, ERF 729 Kahimemua Nguvauva Street, Academia, Windhoek, Namibia.