Privacy Policy
Last updated 24 July 2026
Who we are
Control Tee is a design studio based in Nairobi, Kenya. This policy explains what personal information we collect through this website, why we collect it, how long we hold it, and what you can do about it. It is written to be read, not to be survived.
What we collect
- Information you give us. When you send an inquiry through our contact form, we receive your name, email address, company (if you provide one) and the contents of your message. Nothing on that form is required beyond what we need to reply.
- Booking information. If you book a call, the appointment is handled by Google Calendar's appointment scheduling. The details you enter there are processed by Google, not collected by us directly.
- Technical information. Our host records standard server logs, such as IP address and browser type, for security and reliability. We do not use these to build a profile of you.
We set no advertising cookies, run no analytics product, and do not sell or rent personal information to anyone. There is no tracking pixel on this site.
Why we use it
We use what you send us to reply to your inquiry, to arrange and deliver work, and to keep proper records of our business dealings. When you contact us we rely on your consent. For keeping records and running the studio we rely on our legitimate interest, and on our legal obligation to retain certain business records.
Who we share it with
We use a small number of service providers who process data on our behalf: our website host, our database and file storage provider, our form delivery provider, and Google for appointment scheduling. They act on our instructions and may not use your information for their own purposes. We share nothing with anyone else unless the law requires it.
Where it is stored
Some of these providers store data outside Kenya. That means your information may be transferred to and processed in other countries. We use established providers who offer contractual protections for such transfers, and we keep the amount of personal data we send them to the minimum the service needs.
How long we keep it
Inquiries that do not turn into work are deleted once it is clear nothing is proceeding, and in any case within two years. Project correspondence and records are kept for the life of the project and then for as long as our tax and business record obligations require, after which they are deleted.
Keeping it safe
Access to our systems is limited to people who need it and is protected by individual accounts and passwords. The site is served over an encrypted connection. No system is perfect, and we will tell you promptly if a breach affects your information.
Your rights
Under the Data Protection Act, 2019, you have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to how we use it, to ask us to restrict its use, to receive a copy in a portable form, and to withdraw consent at any time.
To make a request, contact us through our contact page. We will respond within the timeframe the Act requires. If you are not satisfied with our answer, you may complain to the Office of the Data Protection Commissioner.
Children
This site is aimed at businesses and organisations. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.
Client work and portfolio
We show work we have produced for clients on this website. If you are a client and would like a project removed, contact us and we will take it down.
Changes
If we change this policy we will update the date at the top of this page.