Privacy Policy - TrioVault Technologies LTD.

Effective Date: February 2026

At TrioVault Technologies LTD. ("we," "us," or "our"), we are committed to protecting your privacy and ensuring your personal data is handled in compliance with the Data Protection Act of Kenya (2019) and the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, and safeguard your information.

1. Key Definitions

To help you understand this policy clearly, we have defined key terms used:

Personal Data: Information that can identify you as an individual, such as your name, email, or phone number.
Technical Data: Information automatically collected when you access our services, including your Internet Protocol (IP) address, browser type, time zone setting, and operating system.
Cookies: Small text files placed on your device to collect standard internet log information and visitor behavior information.
Automatic Data Collection Tools: Technologies (like Google Analytics, scripts, and server logs) that gather technical data about your navigation and usage patterns.

2. Information We Collect

We may collect and process the following data about you:

Personal Identification Information: Name, email address, phone number, and organization name when you fill out forms or register.
Technical Usage Data: Collected via Automatic Data Collection Tools to help us understand how you use our site and improve user experience.
Payment Data: Transaction details processed by secure third-party payment gateways. We do not store your full credit card information.

3. Children's Privacy

We provide educational programs for children and teenagers. We take extra precautions to protect the privacy of young learners:

Parental Consent: We do not knowingly collect personal data from children under 13 without verifiable parental or guardian consent.
Registration: For our CyberCubs program, registration must be completed by a parent or legal guardian.

4. How We Use Your Information

Service Delivery: To provide cybersecurity services, training, and certifications you have requested.
Communication: To respond to inquiries and send important service updates.
Marketing (with Consent): To send newsletters regarding cybersecurity related content, our initiatives (such as CyberUmoja), or new courses. You may opt-out at any time.

5. Data Security

We take the security of your data seriously. We implement robust security measures, including:

Encryption: We use Secure Socket Layer (SSL) encryption for all data in transit.
Access Control: Access to your personal data is restricted to authorized personnel who have a legitimate need to know.
Secure Storage: Data is stored on secure servers protected by firewalls and regular security audits.

6. International Data Transfers

As a technology company with an international team and cloud infrastructure, your data may be transferred to and processed in countries outside of Kenya.

Third-Party Services: We use trusted third-party service providers (e.g., cloud hosting, email services) that may process data globally.
Safeguards: When data is transferred outside Kenya, we ensure appropriate safeguards are in place in compliance with the Data Protection Act (and GDPR where applicable), ensuring your data remains protected.
Consent: By using our services and providing your data, you acknowledge and consent to this transfer where applicable.

7. Third-Party Sharing

No Selling of Data: We do not sell, trade, or rent your personal identification information to others.
Aggregated Data: We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners and trusted affiliates.

8. Cookies

Usage: Our website uses cookies to enhance your experience.
Control: You can choose to set your web browser to refuse cookies or to alert you when cookies are being sent. If you do so, note that some parts of the Site may not function properly.

9. Data Retention & Withdrawal of Consent

Retention Period: We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or tax reporting requirements (typically up to 7 years).
Withdrawal of Consent: Where we rely on consent to process your data, you have the right to withdraw that consent at any time. You can do this by clicking "unsubscribe" in our emails or contacting us directly at privacy@triovaulttech.co.ke.

10. Your Rights & Complaints

You have significant rights regarding your personal data:

Access & Correction: Request copies of your data or ask us to fix mistakes.
Erasure: Request that we delete your personal data ("Right to be Forgotten").
Right to Complain: If you believe your rights have been violated, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya. You can visit their website at www.odpc.go.ke.

To exercise any of these rights, please contact us at privacy@triovaulttech.co.ke.

11. Updates & Contact

Note: We keep our privacy policy under regular review and place any updates on this web page.


Contact Us: If you have any questions about this Privacy Policy, the data we hold on you, or you would like to exercise one of your data protection rights, please contact us:

TrioVault Technologies LTD.
Email: privacy@triovaulttech.co.ke