Legal

Privacy Policy

Last updated: 20 February 2026

1. Introduction

This Privacy Policy explains how Qazana Systems LTD ("Qazana", "we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you use our website at qazana.net and our products: Qazana Atlas, Qazana Signal, and Qazana Flow (collectively, the "Services").

This policy is governed by the Kenya Data Protection Act, 2019 and any regulations issued thereunder by the Office of the Data Protection Commissioner.

2. Data Controller

Qazana Systems LTD is the data controller responsible for your personal data. For any questions about this policy or your data, contact us at:

Email: Click to reveal

3. Personal Data We Collect

We collect personal data in the following ways:

3.1 Information you provide directly

  • Account registration: Name, email address, and password when you create an account.
  • Contact forms: Name, email address, topic, and message content when you contact us.
  • Email signup: Email address when you sign up for updates or early access.
  • Payment information: Billing details processed securely through our payment provider, Paystack Payments Kenya Limited. We do not store your full card details on our servers.

3.2 Information collected automatically

  • Usage data: Pages visited, features used, timestamps, and interactions with the Services.
  • Device data: Browser type, operating system, screen resolution, and language preferences.
  • Log data: IP address, access times, and referring URLs.

3.3 Cookies and similar technologies

We use essential cookies to keep the Services functional (e.g., session management and authentication). We may also use analytics cookies to understand how our Services are used. You can manage cookie preferences through your browser settings.

4. How We Use Your Data

We process your personal data for the following purposes:

  • Providing, maintaining, and improving the Services.
  • Processing payments and managing your subscription.
  • Responding to your enquiries and support requests.
  • Sending service-related communications (e.g., updates, security alerts).
  • Analysing usage patterns to improve product quality.
  • Complying with legal obligations under Kenyan law.

5. Legal Basis for Processing

Under the Kenya Data Protection Act, 2019, we process your data based on:

  • Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., marketing communications).
  • Contract: Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract.
  • Legitimate interest: Where processing is necessary for our legitimate interests, provided your rights do not override those interests.
  • Legal obligation: Where processing is necessary to comply with applicable law.

6. Payment Processing

Payments for our Services are processed by Paystack Payments Kenya Limited. When you make a payment, your payment card details are collected and processed directly by Paystack in accordance with their Merchant Privacy Policy and PCI DSS standards. We receive only a transaction reference, payment status, and the last four digits of your card for record-keeping purposes.

7. Data Sharing

We do not sell, rent, or trade your personal data. We may share your data with:

  • Payment processors: Paystack Payments Kenya Limited, to process transactions.
  • Service providers: Hosting, analytics, and email delivery providers who process data on our behalf under written agreements.
  • Legal authorities: Where required by law, court order, or to protect our legal rights.

8. Cross-Border Data Transfers

Your data may be transferred to and processed in countries outside Kenya. Where this occurs, we ensure that the receiving jurisdiction provides data protection standards no less than those required under the Kenya Data Protection Act, 2019, or that appropriate contractual safeguards are in place.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Transactional records are retained for seven (7) years in accordance with applicable tax obligations. When data is no longer required, it is securely deleted or anonymised.

10. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

  • Access your personal data held by us.
  • Rectify inaccurate or incomplete data.
  • Delete your personal data, subject to legal retention obligations.
  • Object to or restrict certain types of processing.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at Click to reveal. We will respond within the timeframes prescribed by the Act.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner in Kenya.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child without valid parental consent, please contact us immediately at Click to reveal and we will delete it.

12. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, through a notice on our website or via email.

14. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, contact us at:

Qazana Systems LTD
Email: Click to reveal