Privacy Policy

1. Introduction

Sintal Ltd ("Sintal," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website sintal.africa, use our services, or communicate with us through various channels including WhatsApp, email, and other messaging platforms.

By using our services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.

2. Data Controller

Sintal Ltd is the data controller responsible for your personal data. For any questions about this Privacy Policy or our data practices, contact us at:

3. Information We Collect

3.1 Information You Provide Directly

• Name, email address, and phone number
• Company name and job title
• Messages and communications you send us
• Contact form submissions and demo requests
• Feedback and survey responses

3.2 Information Collected Automatically

• IP address and geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation paths
• Referring website or source
• Date and time of access

3.3 Information from Third Parties

We may receive information from third-party services you use to interact with us, such as social media platforms, messaging services (including WhatsApp), and analytics providers.

4. WhatsApp & Messaging Services

We use WhatsApp Business API and other messaging platforms to communicate with you. When you interact with us via these channels:

4.1 Data Collection

• Your phone number and WhatsApp profile information
• Message content and media you send us
• Message delivery and read status
• Interaction timestamps

4.2 Data Sharing with Meta

When you communicate with us via WhatsApp, certain information (such as your phone number and interaction metadata) may be shared with Meta Platforms, Inc. (WhatsApp's parent company). However, message content is protected by end-to-end encryption and is not accessible to Meta.

4.3 Opt-In Consent

We will only send you WhatsApp messages if you have explicitly opted in to receive them. You can opt out at any time by replying "STOP" or contacting us directly.

4.4 Data Usage Limitations

Information obtained through WhatsApp messaging will only be used for purposes reasonably necessary to support our communication with you. We do not use WhatsApp data for unrelated marketing purposes.

4.5 Prohibited Information

We will never request sensitive information via WhatsApp, including full payment card numbers, financial account numbers, national ID numbers, or passwords.

5. How We Use Your Information

We use your personal data for the following purposes:

5.1 Service Delivery

• Provide, operate, and maintain our services
• Process and respond to your inquiries
• Send transactional communications (order updates, service notifications)

5.2 Communication

• Respond to your messages and support requests
• Send marketing communications (with your consent)
• Provide product updates and announcements

5.3 Analytics & Improvement

• Analyze website usage and performance
• Improve our services and user experience
• Develop new features and products

5.4 Legal & Security

• Comply with legal obligations
• Protect against fraud and unauthorized access
• Enforce our terms and policies

6. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific purposes (e.g., marketing communications)
• Contract: Where processing is necessary to fulfill a contract with you or take pre-contractual steps
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided they do not override your rights
• Legal Obligation: Where processing is required to comply with applicable laws

7. Information Sharing & Third Parties

We may share your information with:

7.1 Service Providers

Third-party companies that help us operate our business, including cloud hosting providers, email services, analytics tools, and customer support platforms.

7.2 Messaging Platforms

Meta Platforms, Inc. (for WhatsApp Business API) and other messaging service providers necessary to facilitate our communications with you.

7.3 Legal Requirements

Government authorities, law enforcement, or other parties when required by law, court order, or to protect our legal rights.

7.4 Business Transfers

In connection with any merger, acquisition, or sale of company assets, your information may be transferred to the acquiring entity.

We do not sell your personal data to third parties.

8. International Data Transfers

Your information may be transferred to and processed in countries outside Kenya, including countries in the European Economic Area (EEA), United States, and other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required, to protect your data during such transfers.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active account data: For the duration of your relationship with us
• Communication records: Up to 3 years after last interaction
• Marketing consent records: Until consent is withdrawn, plus records retained for compliance
• Legal and compliance data: As required by applicable laws

After the retention period, we securely delete or anonymize your data.

10. Your Rights

Under applicable data protection laws (including GDPR and Kenya's Data Protection Act), you have the following rights:

To exercise any of these rights, contact us at privacy@sintal.africa. We will respond within 30 days.

11. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Employee training on data protection
• End-to-end encryption for WhatsApp messages

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

12. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. These include:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

13. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will notify you via email or prominent notice on our website. We encourage you to review this policy periodically.

15. Complaints

If you have concerns about our data practices, please contact us first at privacy@sintal.africa. You also have the right to lodge a complaint with a supervisory authority, including:

• Kenya: Office of the Data Protection Commissioner (www.odpc.go.ke)
• EU: Your local Data Protection Authority