Privacy Policy

Effective Date: November 15, 2025

Last Updated: November 15, 2025

This Privacy Policy describes how Carbon Slash (the Data Controller), in compliance with the Kenya Data Protection Act, 2019 (DPA), collects, uses, and shares information about you when you visit our website.

1. Information We Collect

We collect information directly from you and automatically as you use the Site. The legal basis for processing your data is primarily Consent (for subscriptions) and Legitimate Interests (for site security and analytics).

(a). Personal Data Provided Directly

We collect Personal Data when you voluntarily provide it to us, primarily through the Newsletter Subscription Form.

  • Email Address: Collected when you subscribe to our newsletter.
  • Other Information: Any other information you voluntarily submit via contact forms or direct email correspondence.

(b). Information We Collect Automatically

We use third-party services like Google Analytics to understand how the Site is being used. These tools use Cookies and similar technologies (see our Cookie Policy for details).

  • Usage Data: Information about your interaction with the Site (e.g., pages viewed, time spent, links clicked).
  • Technical Data: Your computer’s Internet Protocol (IP) address, browser type, browser version, device type, and operating system.

2. Data Sharing and Transfer

We do not sell your Personal Data. We share it only with trusted third parties who assist us in operating the Site, ensuring they comply with the DPA:

  • Service Providers: Third-party companies (e.g., newsletter platform) who process data on our behalf as Data Processors.
  • Transfer of Data: Your data may be stored or processed outside of Kenya. Where this occurs, we ensure that appropriate safeguards, as required by the DPA, are in place (e.g., adequate protection standards).
  • Legal Compliance: We will disclose your data where required by the laws of the Republic of Kenya, or in response to valid requests by a public authority (e.g., the Office of the Data Commissioner, Kenyan courts).

3. Your Rights under the Kenya Data Protection Act, 2019

As a data subject under the DPA, you have the right to:

  • Be Informed of the use of your Personal Data.
  • Access your Personal Data.
  • Object to the processing of all or part of your Personal Data.
  • Rectify false or misleading Personal Data.
  • Erase Personal Data that is no longer necessary (the right to be forgotten).
  • Withdraw Consent at any time (e.g., by unsubscribing). To exercise these rights, please contact us using the information below. If you believe your rights have been violated, you have the right to lodge a complaint with the Office of the Data Commissioner (ODC).

4. Contact Information

For any questions regarding this Policy or your data rights, please contact the Data Controller:

  • Entity: Carbon Slash
  • By Email: [carbonslashed@gmail.com]
  • Jurisdiction: Nairobi, Kenya