This Privacy Policy explains how Next Level Marketing Agency (“Next Level”, “we”, “us”) collects, uses, shares and protects personal data when you visit nextlevelmarketing.co.ke, contact us, request a quote or work with us. It is written to meet our obligations under Kenya’s Data Protection Act, 2019 and its regulations.
We keep this simple: we collect only what we need to respond to you and deliver our services, we do not sell personal data, and optional analytics stays off unless you switch it on.
Who we are
Next Level Marketing Agency is a hospitality marketing agency based in Nairobi, Kenya. For the personal data described in this policy we are the data controller.
- Address: Ground Floor, Iconic Plaza Hotel, Market Avenue, Nairobi, Kenya
- Email: info@nextlevelmarketing.co.ke
- Phone: +254 700 129 129
For any question about this policy or your personal data, contact us using the details above and mark your message “Data protection”.
The personal data we collect
Information you give us:
- Quote requests: your name, business or property name, property type, location, the services you are interested in, your timeline, any investment range you choose, your message, phone number and email address.
- Messages: anything you send us by phone, email or social media, including your name, number or address and the content of the conversation.
- Client work: contact details of the people we work with at your business, and the information needed to plan, deliver and invoice our services.
Information collected automatically:
- Technical data our hosting provider records to run and secure the website, such as IP address, browser type, the page requested and the time of the request.
- Only if you enable analytics: how you use the website, such as pages viewed, approximate location (country or city level), device type, and actions such as starting a quote request or tapping an email link. Web addresses are recorded without their query strings.
- Your analytics choice, stored in your own browser so the website remembers it.
We do not ask for, and ask you not to send us, sensitive personal data (such as health information or religious beliefs) through the website.
How we use personal data, and our lawful basis
- To respond to your enquiry and prepare a quote or proposal, because you asked us to, as a step before entering into a contract.
- To deliver services you have engaged us for, communicate about the project and invoice you, to perform our contract with you.
- To keep records required by law, such as accounting and tax records, to comply with legal obligations.
- To keep the website secure, working and free of abuse, including filtering spam submissions, for our legitimate interests in running a safe website.
- To understand how the website is used and improve it, only with your consent, which you can withdraw at any time.
- To send you news or marketing messages, only with your consent. You can opt out at any time by replying “stop” or contacting us.
We do not use personal data for automated decision-making that has legal or similarly significant effects on you, and we do not sell personal data.
Transfers outside Kenya
Some of our service providers store or process data outside Kenya, including in the United States and the European Union. When that happens we rely on the safeguards required by the Data Protection Act, 2019, such as the provider’s contractual commitments to protect personal data to an adequate standard.
How long we keep it
- Enquiries and quote requests that do not lead to work: up to 24 months, so we can refer back to the conversation, then deleted.
- Client and project records: for the duration of our relationship and afterwards for as long as the law requires for accounting, tax and legal purposes (generally at least five years).
- Analytics data: up to 14 months.
- Hosting and security logs: for the short periods our hosting provider keeps them.
- Your analytics choice: in your browser until you change it or clear your browser storage.
People in our photography and film
When we photograph or film at a client’s property, guests and staff may appear in the work. We plan shoots with our clients to respect privacy, including agreeing areas, people or moments that must not be captured, and our clients are responsible for obtaining any consent needed from their guests and staff.
We show client work in our own portfolio or marketing only with the client’s permission. If you appear in our work and would like it reviewed or removed, contact us.
Your rights
Under the Data Protection Act, 2019 you have the right to:
- be informed about how your personal data is used;
- access the personal data we hold about you;
- object to the processing of all or part of your personal data;
- have inaccurate or misleading data corrected;
- have false, misleading or unlawfully processed data deleted;
- withdraw your consent at any time, without affecting processing that took place before; and
- receive your data in a structured, commonly used format and have it transferred to another controller, where applicable.
To exercise any of these rights, email info@nextlevelmarketing.co.ke. We may need to confirm your identity before acting on a request, and we will respond within the time limits set by the law.
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right. You also have the right to complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).
How we protect it
The website is served only over encrypted HTTPS connections, with a strict content security policy. Access to enquiries and client information is limited to the people who need it, and we choose service providers that maintain appropriate security. No method of transmission or storage is completely secure, but we work to protect your data and will act promptly, including notifying you and the Data Commissioner where required, if a breach affects it.
Children
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 18. If you believe a child has sent us personal data, contact us and we will delete it.
Other websites
Our website links to other websites and platforms, such as our clients’ pages and social media. We are not responsible for their privacy practices; please read their policies.
Changes to this policy
We may update this policy when our services, the website or the law change. The date at the top shows when it was last updated. If a change significantly affects how we use personal data you have already given us, we will tell you directly where we can.