Privacy policy

Beyond the Brief Ltd. ("BYND", "we") respects your privacy. This policy explains what personal data we collect through https://bynd.co.ke, why, and your rights under the Kenya Data Protection Act, 2019 ("the Act"). We are the data controller for the information described here.

What we collect

• Enquiries and briefs: name, email, phone/WhatsApp number, organisation, role, the services you're interested in, timeline, budget range and anything you choose to tell us.
• Free tools: your answers to the Youth Market Score or Activation Estimator, and your results.
• Ambassador and job applications: contact details, institution, county, profile links and your motivation statement.
• Payments: when you buy a fixed-price service, our payment processor (Paystack) handles your card or M-Pesa details. We receive confirmation of payment, the amount and your contact details — never your full card number or PIN.
• Usage data: pages visited, referring site, campaign parameters (UTM tags) and device information. Cookie-based analytics only run if you accept them — see our cookie policy.

Why we use it (and our lawful basis)

• To respond to your enquiry, prepare proposals and deliver services — consent and steps prior to a contract.
• To process payments and keep financial records — contract and legal obligation.
• To assess ambassador and job applications — consent.
• To understand and improve our website — consent (cookies) and legitimate interest (aggregate, cookieless measurement).

We do not sell personal data. We do not use your enquiry data for unrelated marketing without your consent.

Who we share it with

Only service providers who help us operate: website hosting (Hostinger), database (Supabase), email delivery, payment processing (Paystack) and, where you consent, analytics (Google Analytics, Meta). Some providers process data outside Kenya; where they do, we rely on appropriate safeguards as required by the Act.

How long we keep it

Enquiries and tool results: up to 24 months after our last contact. Client and payment records: as long as required by law (typically 7 years). Applications: up to 12 months unless you ask us to delete them sooner.

Your rights

Under the Act you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct inaccurate data, or delete data we no longer need;
• stop or restrict processing, or withdraw consent at any time;
• transfer your data to another provider where technically feasible.

Email hello@bynd.co.ke with the subject "Data protection request". We respond within the timelines set by the Act. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC).

Security

Data is encrypted in transit, access is restricted to authorised staff, and our database enforces row-level access controls. See our security page to report a vulnerability.

Contact

Beyond the Brief Ltd., Nairobi, Kenya · hello@bynd.co.ke · +254 743 049 944