Privacy

Ujiajiri Enterprises Limited is the data controller for personal data collected on ujiajiri.ke, and for enquiries submitted on onduu.ke. This page explains how Ujiajiri Enterprises Limited ("Ujiajiri", "we") handles that data. We collect only the information necessary for each purpose, and we record the consent wording and version alongside every submission. Onduu publishes its own privacy notice covering the Digital Fitness service.

Introduction requests

When you submit the Request an Introduction form we collect your name, business name, work email, telephone, website, country, service needs, project description and, if you choose to give them, budget range and timing. We use this information to understand your request and identify a possible independent provider.

We do not share your identifiable information with any provider until we tell you who the proposed provider is and receive your permission. Your approval is recorded before anything is sent. If the proposed provider is in another country, the transfer is reviewed for privacy compliance before any information leaves your country.

Partner waitlist applications

Waitlist applications collect first-stage business information only: legal or trading name, provider type, accountable contact, email, telephone, region, services, website, portfolio links, years operating, client fit and availability. We deliberately do not collect registration documents, identity documents, references or certificates at this stage. Waitlist records are kept separate from customer enquiries, are never published, and do not place an applicant in the matching pool.

What we never do

• Silently forward a submission to a provider, Onduu or HOSTAFRICA.
• Expose submissions in URLs, analytics, logs or client-side code.
• Collect passwords, credentials, identity documents or sensitive client records through these forms.
• Sell personal data.

Complaints and feedback

If you report a concern or give feedback on an introduction, we process what you provide in order to investigate, keep a record of the outcome, and apply the published standards. We share it only as needed to resolve the matter fairly.

Email

When you email us, we use your address and message to respond. We do not add you to marketing lists without separate consent.

Analytics

We use Google Tag Manager and Google Analytics to understand how the site is used (pages visited, approximate location, device type). This data is aggregated and is not used to identify you. Form contents are never sent to analytics.

Data recipients and processors

Site hosting and form delivery run on Cloudflare; transactional email is sent via ZeptoMail (Zoho); analytics is provided by Google. Each acts under its standard data-processing terms. Access to submissions is restricted to authorised Ujiajiri operators.

Retention and deletion

We keep personal data only as long as needed for the purpose it was collected for, then delete it. The current periods are:

• Enquiries that do not lead to an introduction: 12 months.
• Enquiry and referral records where an introduction was made: 6 years from the last activity on the referral.
• Partner waitlist applications: 24 months, or until the applicant asks to be removed.
• Complaint and correction records: 6 years.

You can ask us to delete your record sooner. We will do so unless we are required to keep it to resolve a live complaint or to evidence a referral.

Your rights

Under the Kenya Data Protection Act, 2019, and equivalent law where you are, you may request access to, correction of, or deletion of your personal data. Raise the request through the routes on the Contact page, including by replying to any email you have received from Ujiajiri, and we will respond.