Privacy

Ujiajiri Enterprises Limited is the data controller for personal data collected on ujiajiri.ke, and for enquiries submitted on onduu.ke. This page explains how Ujiajiri Enterprises Limited ("Ujiajiri", "we") handles that data. We collect only the information necessary for each purpose, and we record the consent wording and version alongside every submission. Onduu publishes its own privacy notice covering the Digital Fitness service.

Introduction requests

When you submit the Request an Introduction form we collect your name, business name, work email, telephone, website, country, service needs, project description and, if you choose to give them, budget range and timing. We use this information to understand your request and identify a possible independent provider.

We do not share your identifiable information with any provider until we tell you who the proposed provider is and receive your permission. Your approval is recorded before anything is sent. If the proposed provider is in another country, the transfer is reviewed for privacy compliance before any information leaves your country.

Partner waitlist applications

Waitlist applications collect first-stage business information only: legal or trading name, provider type, accountable contact, email, telephone, region, services, website, portfolio links, years operating, client fit and availability. We deliberately do not collect registration documents, identity documents, references or certificates at this stage. Waitlist records are kept separate from customer enquiries, are never published, and do not place an applicant in the matching pool.

What we never do

• Silently forward a submission to a provider, Onduu or HOSTAFRICA.
• Expose submissions in URLs, analytics, logs or client-side code.
• Collect passwords, credentials, identity documents or sensitive client records through these forms.
• Sell personal data.

Complaints and feedback

If you report a concern or give feedback on an introduction, we process what you provide in order to investigate, keep a record of the outcome, and apply the published standards. We share it only as needed to resolve the matter fairly.

Email

When you email us, we use your address and message to respond. We do not add you to marketing lists without separate consent.

Cookies, Tracking and Activity Monitoring

We monitor how people use all of our websites (wpfoss.ke, wpfoss.com, partners.wpfoss.ke, rank.ke, every.ke, eadirectory.com, album.ke, album.africa, nipecode.ke, onduu.ke, ujiajiri.ke and insurepap.com). We do this to see what works, fix what does not, keep accounts safe and measure our marketing.

What we record: the pages opened, where visitors came from, the type of device, and actions taken, such as opening the request form. Form contents are never sent to analytics.

Our own records. Our websites also send page views and clicks to our own server at wpfoss.ke, so we can see in one place how people use all our sites. This sets no cookie and stores nothing in your browser. We recognise a returning visitor during one day by a scrambled code made from your IP address and browser, which changes every day; we never store your IP address. These records are deleted after 365 days.

Google Tag Manager always loads on this site. It decides which tools may run, and it sets no cookies itself.

Tools that need your consent: Google Analytics, which shows us aggregate use of the site. Encharge, our email marketing tool. The Meta Pixel (Facebook) tells us which visits come from Facebook and Instagram, so we can measure our marketing there. If we advertise on those platforms in future, it may also be used to show our ads to people who have visited. These run only after you press Accept. Google and Meta process data under their own policies and may process it outside Kenya.

Your choice: when you first visit, a banner asks you to Accept or Reject. You can change your mind at any time with the "Cookie settings" link in the footer. If you choose Reject later, the tools stop running, but cookies already set stay until you clear them in your browser.

Data recipients and processors

Site hosting and form delivery run on Cloudflare; transactional email is sent via ZeptoMail (Zoho); analytics is provided by Google. Each acts under its standard data-processing terms. Access to submissions is restricted to authorised Ujiajiri operators.

Retention and deletion

We keep personal data only as long as needed for the purpose it was collected for, then delete it. The current periods are:

• Enquiries that do not lead to an introduction: 12 months.
• Enquiry and referral records where an introduction was made: 6 years from the last activity on the referral.
• Partner waitlist applications: 24 months, or until the applicant asks to be removed.
• Complaint and correction records: 6 years.

You can ask us to delete your record sooner. We will do so unless we are required to keep it to resolve a live complaint or to evidence a referral.

Your rights

Under the Kenya Data Protection Act, 2019, and equivalent law where you are, you may request access to, correction of, or deletion of your personal data. Raise the request through the request form on the homepage, including by replying to any email you have received from Ujiajiri, and we will respond.