This policy explains how we handle personal data when you visit willsoft.co.ke, contact us or work with us.
Who we are
WILLTRUTH SOFT SYSTEMS & TECHNOLOGIES LTD is a private limited company operating in Kenya and trading as Willsoft Technologies. For personal data collected through this website and our direct business relationships, we act as the data controller unless a contract states otherwise.
Privacy enquiries and requests can be sent to info@willsoft.co.ke.
Personal data we collect
We may collect information you provide through an enquiry, proposal request, project engagement, job application or direct communication, including your name, work contact details, company, role, project requirements and message.
Our systems may also receive limited technical information such as IP address, device and browser details, referring pages, pages visited, timestamps and security logs. If you become a client, we may process billing, contractual and service-delivery records.
How and why we use it
We use personal data to respond to enquiries; prepare and perform contracts; deliver, secure and support our services; manage accounts and payments; improve our website and operations; prevent misuse; meet legal obligations; and, where permitted, communicate relevant company updates.
Depending on the context, processing is based on your consent, steps requested before entering a contract, performance of a contract, compliance with law, or our legitimate interests where those interests do not override your rights.
Cookies and analytics
We may use essential cookies needed for security, preferences and core website operation. We may also use privacy-conscious analytics to understand aggregate website use. Where applicable, non-essential cookies will be used only after the required choice or consent. You can control cookies through the consent tool and your browser settings.
Sharing and service providers
We do not sell personal data. We may share only what is necessary with vetted providers supporting hosting, cloud infrastructure, analytics, email, collaboration, payments, security and professional advice. We may also disclose information where required by law, a lawful authority, or to protect legal rights.
International transfers
Some technology providers may process information outside Kenya. Where personal data is transferred internationally, we use appropriate contractual, technical and organisational safeguards and follow the requirements of Kenya’s Data Protection Act.
Retention
We keep personal data only for as long as reasonably necessary for the stated purpose, contractual and support obligations, security, dispute handling, and applicable legal or financial record-keeping requirements. We then delete, anonymise or securely archive it as appropriate.
Your rights
Subject to applicable law, you may ask to be informed about processing, access your personal data, object to processing, correct inaccurate or misleading data, request deletion where we are no longer authorised to retain it, restrict processing, or request portable data where applicable.
You may withdraw consent without affecting processing already carried out. To exercise a right, email info@willsoft.co.ke. We may need to verify your identity before acting.
Security and data incidents
We use proportionate technical and organisational measures designed to protect personal data, including access controls, secure development practices, backups and monitoring where appropriate. No internet service can promise absolute security. Where a qualifying breach occurs, we will take the response and notification steps required by Kenyan law.
Children
Our business website and services are not directed to children. We do not knowingly collect a child’s personal data through this website without the authorisation and safeguards required by law.
Questions and complaints
Please contact us first at info@willsoft.co.ke so we can address your concern. You may also lodge a complaint with Kenya’s Office of the Data Protection Commissioner.
Policy changes
We may update this policy when our practices, services or legal obligations change. The revised version will be posted here with a new effective date. Material changes may also be communicated through an appropriate additional channel.