ASTRAFORGE COMPANY LIMITED

Privacy Notice

Last updated: 31 August 2026

1. Who we are

AstraForge Company Limited ("AstraForge", "we", "us") is a company registered in Kenya and operating from Kiambu. For the purposes of the Data Protection Act, 2019 (Kenya) ("the Act"), AstraForge is the data controller for personal data submitted through this website.

2. What we collect

When you use the enquiry form on this site, we collect:

Your name
Your organization (optional)
Your email address
Your phone number (optional)
The area of interest you select and the message you write
Your IP address, browser user-agent string and the time of submission, recorded alongside the enquiry to detect and prevent automated abuse of the form

This website sets no cookies. It uses no analytics, advertising, or tracking technology. Typefaces are served from our own server rather than from a third-party font service, so loading a page on this site does not disclose your visit to any other company.

3. Why we process it

We process this data to respond to your enquiry and, where relevant, to discuss or deliver the services you asked about. Our legal basis under the Act is your consent, given by submitting the form, together with our legitimate interest in responding to business enquiries directed to us. The IP address and user-agent are processed on the basis of our legitimate interest in keeping the form secure.

4. How long we keep it

Enquiry data is retained only for as long as is needed to respond to you and, where an engagement follows, for the duration of that engagement plus any period required by Kenyan tax, contract, or company-law record-keeping obligations. Enquiries that do not lead to an engagement are deleted after 24 months. Abuse-prevention records (IP address and submission counts) are discarded within one hour.

5. Where it is stored and who else sees it

The enquiry form is processed by software running on our own hosting account. Your submission is emailed to our info@astraforge.co.ke inbox and written to a log file on the same hosting account. It is not passed to any third-party form-handling service.

Two categories of service provider necessarily have technical access to that data in the course of hosting it for us: our web hosting provider, and the provider of the email service that carries the notification message to our inbox. Both act as data processors on our instruction and do not use your data for their own purposes.

We do not sell, rent, or trade personal data. We disclose it to no other party except where we are legally required to do so.

6. Transfers outside Kenya

Where our hosting or email infrastructure is located outside Kenya, your data may be stored or transmitted outside the country. Section 48 of the Act permits such transfers where appropriate safeguards are in place or where the transfer is necessary for the performance of a contract or for steps taken at your request before entering into one. Contact us using the details in Section 8 if you would like current information on where our infrastructure is hosted.

7. Your rights

Under the Data Protection Act, 2019, you have the right to:

Be informed of the use to which your personal data is to be put;
Access your personal data in our custody;
Object to the processing of your personal data;
Correct any inaccurate or misleading data;
Have your personal data deleted;
Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

To exercise any of these rights, contact us using the details in Section 8.

8. Contact

Questions about this notice or about your personal data: info@astraforge.co.ke or +254 725 655 500. Postal enquiries can be addressed to AstraForge Company Limited, Kiambu, Kenya.

9. Changes to this notice

We may update this notice as our processing activities or Kenyan data protection law change. The date at the top of this page reflects the most recent revision.

Note for AstraForge, remove before publishing: this notice describes the processing this website actually performs and is accurate as to the technical facts. It has not been reviewed by a qualified Kenyan data protection practitioner, and it does not address whether AstraForge is required to register with the ODPC as a data controller or processor for its wider operations. Obtain legal review, confirm the retention periods against your actual practice, and name your hosting and email providers in Section 5 before relying on this document. Sections 5, 6 and 8 also require a postal address if you hold one.

Back to website