Privacy Policy

1. Who We Are

Zeplin Investments (Kenya) Ltd, trading as iNet Africa, operates this website and provides internet services on the Kenyan Coast. We are the data controller for the personal data described below and are committed to handling it in accordance with the Kenya Data Protection Act, 2019.

Office B3, Level 1, Om Plaza, Lamu Road, Malindi. Contact: sales@inet.africa / +254 730 966 669.

2. Information We Collect

When you visit our website or submit an application, we may collect:

• Application details — full name, salutation, email address, phone number, town and installation location, service type (home/business).
• Identity documents — copies of your national ID or passport (front and back), and for businesses, KRA PIN and certificate of incorporation, uploaded through the application form.
• Signature — your digital signature drawn on the application form.
• Device and usage data — IP address, browser type, pages visited, referrer, and approximate location, collected through cookies and similar technologies.
• Marketing attribution — campaign, ad set and ad identifiers, placements and site sources, when you arrive from a Meta (Facebook/Instagram) or Google advertisement.

3. How We Use Your Data

• To assess coverage in your area and recommend a suitable service plan.
• To carry out installation, activation, billing and ongoing support of your service.
• To comply with KYC and regulatory obligations under Kenyan law.
• To measure the effectiveness of our marketing campaigns and optimise future advertising.
• To improve our website, products and customer experience.

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies, including:

• Meta Pixel (also called Facebook Pixel) to measure ad performance, build audiences for future advertisements, and attribute conversions on Meta's platforms (Facebook, Instagram). The Meta Pixel may record page views, form interactions, and successful submissions, along with limited device and browser information.
• Google Analytics & Google Ads tags to measure traffic, conversions and ad performance across Google properties.
• Essential cookies required for the application form to function.

You can disable cookies in your browser settings, but parts of our website (especially the application form) may not work correctly. You can also opt out of personalised Meta advertising at facebook.com/about/ads and Google advertising at adssettings.google.com.

5. Sharing Your Data

We share your data only with the third parties strictly necessary to operate our service:

• Zoho Corporation — for CRM (Zoho CRM) and document storage (Zoho WorkDrive) of leads, customers and uploaded identity documents.
• Meta Platforms, Inc. and Google LLC — for advertising measurement and audience building, as described above.
• Payment processors (M-Pesa / banks) — to process subscriptions.
• Regulatory authorities — where disclosure is required by Kenyan law.

We do not sell your personal data.

6. Data Retention

We retain customer data for the duration of your service with us and for up to seven (7) years after termination, in line with Kenyan tax, KYC and consumer-protection obligations. Marketing analytics data is retained for shorter periods set by the respective platforms (Meta typically up to 180 days, Google Analytics up to 14 months by default).

7. Your Rights

Under the Kenya Data Protection Act, 2019 you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to our legal retention obligations.
• Object to processing for direct marketing.
• Lodge a complaint with the Office of the Data Protection Commissioner (odpc.go.ke).

To exercise any of these rights, email sales@inet.africa.

8. Security

We use reasonable technical and organisational measures to protect your data, including HTTPS encryption in transit, restricted access to our CRM and document store, and regular review of our processors. No system is perfectly secure; please notify us immediately if you suspect unauthorised access to your data.

9. Children

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through our website or by email where appropriate.