Privacy policy

Effective date: 4 November 2026 · Website operator: Raven Security Africa Limited.

1. Who to contact

For this website and our own enquiries, Raven Security Africa Limited decides how the relevant information is used. Contact support@ravensecuritykenya.com or +254 180 309496. The coordination office is at Kose Heights, Argwings Kodhek Road, Kilimani, Nairobi, Kenya.

In a client assignment, Raven may act on the client’s documented instructions for some information or have separate legal responsibilities. The contract should identify the relevant roles, purposes and contacts.

2. Information you provide

An initial enquiry may include your name, organisation, email, phone number, location, service requirements, proposed dates and message. A careers enquiry may include a CV and experience details. Correspondence, quotations and contract records may be kept when you engage with us.

Please limit an initial message to information needed to assess the enquiry. Do not send identity scans, passwords, camera credentials, sensitive evidence, private itineraries or unrelated third-party information through the general form.

3. How the contact form works

The supplied contact form sends its fields to the W3Layouts form-processing endpoint at sendmail.w3layouts.com. The form provider processes the submission according to its service arrangements. You can instead email or message Raven directly through the published contact links.

Once Raven receives an enquiry, relevant correspondence may be used and retained for the stated purposes. The website form has no document-upload field. Avoid sensitive documents, credentials and unnecessary third-party information in an initial message.

4. Technical data and preferences

Hosting and related service providers may process technical request information such as an IP address, browser information, requested pages and security logs when the website is accessed.

The existing theme control may store a light or dark display preference through your browser. Browser settings allow you to review and clear locally stored preferences, cookies and other site data.

5. External services used by the website

The website uses the original Google Fonts stylesheet, the GetButton contact widget, a Google Maps embed on the contact page, and the W3Layouts form-processing service. Requests to these services can disclose technical information, including IP and browser information, to the relevant providers. Their own privacy policies and applicable browser controls apply.

Choosing WhatsApp, an email link, a telephone link or a social profile opens the relevant external service. Information you choose to send is handled under that provider’s arrangements. Review its privacy settings before sharing information. Direct email and WhatsApp links are alternatives to the contact form.

6. Purposes and lawful handling

We use relevant information to respond to an enquiry, scope a requested service, prepare and administer a contract, communicate about an assignment, assess recruitment interest, keep appropriate business records, protect systems and address complaints or legal requirements.

Processing must have an appropriate lawful basis under Kenya’s Data Protection Act, 2019. Depending on the activity, this may involve steps requested before a contract, contract performance, a legal obligation, a properly assessed legitimate interest or valid consent. A purpose requiring consent is not treated as authorised merely because someone sends a general enquiry.

7. Sharing and international services

Information may be shared with authorised personnel and appropriate service providers where needed for the stated purpose, subject to suitable duties and safeguards. Legal disclosures may be made where required or lawfully justified. Information is not offered for sale.

Website, communications and technical providers may process information outside Kenya. The providers, locations and appropriate safeguards should be assessed for the particular processing activity. A client monitoring or investigation assignment should identify its systems and authorised recipients before information is shared.

8. CCTV, verification and investigation data

A service agreement should identify the client’s purpose, lawful authority, relevant data, responsibilities, access permissions, handling instructions, retention arrangements and incident process. A website enquiry does not authorise access to a camera system or third-party record.

Camera views, notices, recording, exports and monitoring access should be proportionate to the defined purpose. Sensitive technology or high-risk processing may require additional assessment and safeguards before use. Relevant ODPC registration obligations must also be considered.

9. Retention and security

Information is retained only for as long as needed for its purpose and applicable contractual, legal or record-keeping requirements. Retention depends on the type of enquiry or assignment. Ask us for the retention arrangement applying to a particular record or service.

Access should be limited to authorised people and information shared through suitable channels. No internet service or communication method can be guaranteed completely secure. Contact us promptly if you believe information sent to Raven has been exposed or misdirected.

10. Your personal data requests

Subject to applicable law and any relevant limitations, you may ask about access, correction, objection, deletion or other rights available under Kenyan data protection law. Where processing relies on consent, you may withdraw that consent without affecting prior lawful processing.

Send your request to support@ravensecuritykenya.com. Explain the information or processing concerned. We may need proportionate identity verification and clarification before acting. Do not send unnecessary identity documents with the first request.

11. Children’s information

This website is directed to people making business, service or employment enquiries. Do not submit a child’s personal information through the general form. If an assignment involves children’s information, the authority, purpose, legal requirements and safeguards must be assessed specifically.

12. Questions, complaints and changes

Raise a concern through the company contact first so it can be reviewed. You can also approach Kenya’s Office of the Data Protection Commissioner using its official channels.

We may revise this policy as the website or processing changes. The effective date appears above. Separate contractual notices may apply to an active assignment.

Primary references checked 4 November 2026: ODPC, ODPC FAQs and ODPC data protection compliance information.