Confidentiality by default
Client work is confidential whether or not an NDA is in place. We will sign yours, or provide ours.
Our work puts us close to information companies do not share lightly — strategy documents, customer data, commercial performance, and in executive support engagements, the inbox and calendar itself. This page sets out plainly what we collect, who can see it, how long we keep it, and the commitments we make to you.
Client work is confidential whether or not an NDA is in place. We will sign yours, or provide ours.
Only the people staffed on your engagement can reach your data. Administrative access is restricted and logged.
Our forms ask for a name, an email address and your message. We do not ask for information we have no use for.
Ask us what we hold, have it corrected, or have it deleted. Kenya's Data Protection Act gives you that right; we honour it regardless of where you are.
Every engagement is treated as confidential from the first conversation, including material shared while you are still deciding whether to work with us.
This covers the website itself. Data you share with us inside a paid engagement is governed by your contract and NDA, not by this table.
| What | Why we collect it | How long we keep it |
|---|---|---|
| Name, email and message from the contact form |
To answer your enquiry and, if it becomes a project, to deliver it. | Retained while the enquiry is active and for a defined period afterwards. See “Your rights” below to request earlier deletion. |
| Email address from newsletter sign-up |
To send the monthly insights email you asked for. | Until you unsubscribe. |
| IP address and page visited | Aggregate traffic measurement — which pages are read, and how often. | Retained as site analytics. Not used to build individual profiles and never sold. |
| Live chat messages | To answer questions in real time via our chat provider. | Held by the chat provider under their retention policy. |
We do not sell your data, and we do not share it with advertisers.
We keep the list of third parties deliberately short. Today it is:
Neither analytics nor live chat loads until you accept cookies — declining genuinely switches them off rather than just hiding the banner. You can change your choice at any time from “Cookie settings” in the footer. If this list changes, this page changes with it.
Primestart Research operates from Nairobi, Kenya, and is subject to the Data Protection Act, 2019, overseen by the Office of the Data Protection Commissioner. Under that Act you have the right to be told what personal data we hold about you, to have inaccurate data corrected, to ask us to delete it, and to object to how it is being processed.
Clients in the EU and UK have equivalent rights under GDPR. We apply the same process to every request regardless of where it comes from — it is simpler, and it is the right default.
To make a request, email privacy@primestartresearch.com. We will confirm receipt and respond within the statutory period.
Plenty of our conversations start that way, and it is never a problem. Send us your agreement, or ask for ours, and we will have it signed before you share anything.
Request an NDA