Privacy Policy
Last updated: 1 March 2026
1. Who We Are
Tokea is a digital growth agency based in Nairobi, Kenya. We provide SEO, website design, content creation, and related services to businesses. This policy explains how we handle your personal information.
2. Information We Collect
We collect information you provide directly — such as your name, email address, business details, and payment information when you sign up or purchase a service. We also collect usage data (pages visited, actions taken) to improve our platform, and technical data such as IP address and browser type for security and performance purposes.
3. How We Use Your Information
We use your information to deliver and improve our services, communicate with you about your account and projects, send relevant updates and reports, process payments, and comply with legal obligations. We do not sell your personal information to third parties.
4. Data Sharing
We share your data only with trusted service providers who help us operate (such as our hosting provider, email platform, and payment processor), and only to the extent necessary. All third-party providers are contractually required to protect your data. We may disclose information if required by Kenyan law or a valid legal process.
5. Cookies
Our platform uses cookies to maintain your session, remember your preferences, and analyse usage patterns. You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features.
6. Data Retention
We retain your account data for as long as your account is active or as needed to provide services. After account closure, we may retain certain records for up to 7 years for legal and accounting purposes, then securely delete or anonymise them.
7. Your Rights
You have the right to access, correct, or delete your personal data. You may also request that we restrict processing or export your data in a portable format. To exercise any of these rights, contact us at privacy@tokea.co and we will respond within 30 days.
8. Security
We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication, and access controls. No system is completely secure, but we take reasonable steps to protect your information from unauthorised access.
9. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our platform. The date at the top of this page reflects when the policy was last revised.
11. Contact Us
For privacy-related questions or requests, contact us at privacy@tokea.co. We are committed to resolving any concerns promptly and transparently.