Privacy Policy

Effective 21 October 2026

1. Who we are

This website, buildyourwealth.co.ke, is operated by Build Your Wealth, a financial coaching practice led by Linda Jerono and based in Nairobi, Kenya. For the purposes of the Data Protection Act, 2019, Build Your Wealth is the data controller of the personal data described in this policy: we decide why and how it is processed, and we are responsible for it.

2. What we collect

We collect personal data only when you give it to us, or when it is generated by your use of the site:

We do not ask for, and ask you not to send us, sensitive personal data such as health information, ID numbers, passwords, PINs or full card numbers. If you share information about your finances during a consultation, it is used only to advise you.

3. How we use it, and why we may

We use personal data only for the specific purpose for which it was collected, and we do not process it in a way that is incompatible with that purpose. Under section 30 of the Data Protection Act, each use rests on a lawful basis:

• To reply to your enquiry - your contact message and details, on the basis of your consent in sending them.
• To take and manage your booking - confirming payment, sending your booking link and receipt, arranging another payment method if you ask, and holding the session - because it is necessary to perform the service you have asked us for.
• To keep financial records - payment and booking records, because Kenyan tax law requires us to.
• To keep the site secure - preventing fraud, duplicate payment claims and abuse of the forms, in our legitimate interest in protecting you and our business.

We send you emails only about your enquiry or booking. We do not add you to a mailing list or send you marketing unless you separately ask us to, and you can withdraw that consent at any time. We make no decisions about you by automated means alone.

4. Who we share it with

We never sell, rent or trade your personal data. We share it only with service providers who process it on our behalf, under our instructions, and only as far as they need to provide their service:

• PayHero and Safaricom M-Pesa - to send the payment request to your phone and confirm the payment.
• Calendly - to let you choose a time and to send you the calendar confirmation.
• Our email provider - to deliver the messages about your booking or enquiry.
• Our website host - which stores the site and its database.
• The provider of any other payment method you choose (for example PayPal or your bank) - only when you ask to pay that way, and only what is needed to complete the payment.

We may also disclose personal data where the law requires it, for example to comply with a court order or a lawful request from a public authority, or to protect our legal rights.

5. Transfers outside Kenya

Some of our service providers, such as Calendly and our email provider, store data on servers outside Kenya. Where that happens, we transfer only what is necessary, and only to providers that offer appropriate safeguards for the security and protection of personal data, as sections 48 to 50 of the Data Protection Act require.

6. How long we keep it

We keep personal data only as long as the purpose needs it, or the law requires:

• Booking and payment records - for as long as Kenyan tax law requires financial records to be kept, currently five years after the transaction.
• Contact messages - for up to two years after our last exchange with you, so we can follow up on the same matter.
• Bookings that were started but never paid - for up to twelve months.
• Sign-in and security logs - for up to twelve months.

When data is no longer needed, we delete it or anonymise it so that it can no longer identify you.

7. How we protect it

We take appropriate technical and organisational measures to protect personal data, including:

• encryption of all traffic to and from the site (HTTPS);
• access to booking and contact records only for authorised staff, who sign in with a one-time code sent to a company mailbox;
• private booking links that are long, random and expire;
• never storing card numbers, PINs or passwords;
• protection against automated abuse of the forms, and a record of administrative actions.

No system is perfectly secure. If a data breach is likely to put your rights at risk, we will notify the Office of the Data Protection Commissioner and, where required, you, within the time the law sets.

8. Cookies

This site sets one cookie of its own, a session cookie (byw.sid). It is strictly necessary: it remembers your booking as you move from step to step, and keeps the forms secure. It holds only a random identifier, is not used for tracking, and expires after a few hours without use.

We use no analytics, advertising or social-media tracking cookies. Two third-party services may set their own cookies when you use them: YouTube, when you play a video embedded in an article, and Calendly, on the page where you choose your time. Their use is governed by their own privacy policies. You can block or delete cookies in your browser settings, though the booking steps need the session cookie to work.

9. Your rights

Under section 26 of the Data Protection Act, 2019, you have the right to:

• be informed of how your personal data is used - which is what this policy does;
• access the personal data we hold about you;
• object to the processing of all or part of your personal data;
• correct data that is false or misleading;
• delete data that is false, misleading, or that we no longer have a lawful reason to keep;
• data portability - to receive your data in a structured, commonly used format (section 38);
• withdraw consent at any time, where we rely on it, without affecting what was done before.

To exercise any of these, email buildyourwealthhub@gmail.com from the address you used with us, or tell us your booking reference. We may need to confirm your identity first. We will respond within the time the law allows, and there is no charge. Some records, such as payment records we must keep for tax purposes, may have to be retained even after you ask us to delete them; if so, we will tell you why.

10. Children

Our services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

11. Other websites

The site links to other services, such as WhatsApp, Instagram, TikTok, Facebook and YouTube. When you follow those links you leave this site, and their own privacy policies apply.

12. Changes to this policy

We may update this policy when our services or the law change. The effective date at the top shows when it was last revised. If a change significantly affects how we use your personal data, we will tell you before it takes effect where we can.

13. Contact and complaints

For any question about this policy or your personal data, contact us:

• Email: buildyourwealthhub@gmail.com
• Phone: +254 700 799 492
• Build Your Wealth, Nairobi, Kenya

If you are not satisfied with our response, you have the right to complain to the Office of the Data Protection Commissioner (ODPC), Kenya's data protection authority, at www.odpc.go.ke.