Privacy Policy

Personal Identification Information: When you register for an account, purchase a hosting plan, or contact our support team, we may collect your full name, email address, phone number, postal address, and company name.

Billing Information: We collect payment details necessary to process your transactions. For M-Pesa payments, this includes your M-Pesa transaction ID and phone number. For card payments, we collect the last four digits of your card, cardholder name, and billing address. Full card details are processed by our PCI-compliant payment gateway and are never stored on our servers.

Technical Data: We automatically collect certain information when you visit our website or use our services, including your IP address, browser type, operating system, referring URLs, device information, and pages visited.

Account Activity Data: Information about your services, invoices, support tickets, domain registrations, and usage patterns within your Taifa Cloud account.

We use the information we collect for the following purposes:

• To provide, maintain, and improve our hosting and domain services
• To process transactions and send billing invoices and receipts
• To communicate with you about your account, including service updates, security alerts, and support responses
• To detect, prevent, and address technical issues, fraud, and abuse
• To comply with legal obligations, including ICANN requirements for domain registrations
• To send marketing communications (only with your explicit consent, and you may opt out at any time)

We implement a variety of security measures to maintain the safety of your personal information:

• All data transmitted between your browser and our servers is encrypted using SSL/TLS technology (256-bit encryption)
• Customer data is stored on secure servers located in Tier-III data centers within Kenya
• Access to customer data is restricted to authorized personnel only, on a need-to-know basis
• We conduct regular security audits and vulnerability assessments
• Payment information is processed through PCI DSS-compliant third-party gateways
• All accounts are protected by password hashing and optional two-factor authentication (2FA)

While we take every precaution to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will promptly notify you of any data breach as required by Kenyan law.

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device by your web browser.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function properly, including session management and security
• Functional Cookies: Remember your preferences and settings for a personalized experience
• Analytics Cookies: Help us understand how visitors interact with our website so we can improve it
• Third-Party Cookies: Used by integrated services such as payment gateways and live chat

You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our website. We do not use cookies for targeted advertising.

We do not sell, trade, or transfer your personal information to external parties without your consent, except in the following circumstances:

• Payment Processors: We share necessary billing information with our PCI-compliant payment gateways (e.g., Safaricom M-Pesa, card processors) to process your transactions
• Domain Registries: Domain registration requires us to submit your contact information to the relevant domain registry (e.g., KeNIC for .ke domains, ICANN for gTLDs) as required by their policies
• Legal Compliance: We may disclose information when required by law, court order, or governmental regulation
• Service Providers: We may engage trusted third-party service providers to assist in operating our business, subject to confidentiality agreements

Under the Kenya Data Protection Act (2019) and applicable data protection laws, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing of your data for marketing purposes

To exercise any of these rights, please contact our Data Protection Officer at dpo@taifacloud.co.ke. We will respond to your request within 30 days as required by law.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.