Privacy notice

1. Who we are

This website is operated by Smartcode Technologies Limited ("Smartcode", "we", "us"). We decide how personal information collected through this website is used, which makes us the data controller under the Kenya Data Protection Act, 2019 and, for visitors in the European Union, the EU General Data Protection Regulation (GDPR).

Company

Smartcode Technologies Limited

Legal form

Private limited company incorporated in Kenya under the Companies Act

Registered office

Life Ministry Building, 1st Floor, Rose Avenue, Hurlingham
P.O. Box 286 - 00517 Uhuru Gardens, Nairobi, Kenya

Company registration

Registrar of Companies, Business Registration Service (BRS), Kenya
Registration number CPR/2013/106122, incorporated 21 June 2013

Phone

+254 20 3860442

Email

info@smartcode.co.ke

For any privacy question or request, email info@smartcode.co.ke with "Privacy request" in the subject line.

2. What this notice covers

This notice covers this website only. When Smartcode runs software for a bank, insurer or other client (for example SCAPI, a self-service portal or a wallet), that client decides how its customers' information is used and its own privacy notice applies. We process that information on the client's instructions.

3. Information we collect and why

When you browse the website

Like every website, our web server automatically records technical details of each request: your IP address, the date and time, the page or file requested, your browser and operating system, and the page you came from. We use these server logs only to deliver the website, keep it secure and investigate faults or attacks. They are kept for a limited period and then deleted. Our legal basis is our legitimate interest in running a secure website (GDPR Art. 6(1)(f); Data Protection Act, section 30).

Statistics (Google Analytics) - only with your consent

If you click Accept in our cookie banner, we use Google Analytics 4 to understand how visitors use the site: which pages are viewed, how visitors arrive, and the type of device, browser and approximate location (country or city). Google Analytics sets the cookies _ga and _ga_<ID>, which last up to two years and let it recognise a returning browser. Google Analytics 4 does not store full IP addresses. Advertising and personalisation features are switched off.

If you click Decline, or do nothing, Google Analytics is not loaded and no statistics cookies are set. You can change your choice at any time with the Cookie settings link at the bottom of every page; withdrawing consent deletes the Google Analytics cookies from your browser.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information may be transferred to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework. We keep analytics data for no longer than 14 months. Legal basis: your consent (GDPR Art. 6(1)(a); Data Protection Act, section 30). See Google's privacy policy.

Your cookie choice

We remember whether you accepted or declined statistics in your browser's local storage (entry sc-consent) for six months, so we do not ask on every visit. This stays on your device and is not sent to us.

When you contact us

If you email or call us, for example to book a demo, we use your name, contact details, organisation and message to answer you and, if you wish, to prepare a proposal. Legal basis: steps taken at your request before a possible contract, and our legitimate interest in answering business enquiries (GDPR Art. 6(1)(b) and (f)). We keep enquiry correspondence for as long as needed to handle it; if it leads to a contract, it is kept as part of the business records the law requires us to keep.

What we do not do

• We do not sell personal information or use it for advertising.
• We do not use social-media plugins. Links to LinkedIn, client websites or whistle360.com only take you to those sites, whose own privacy notices then apply.
• Our fonts and images are served from our own server, so viewing the site does not contact font or image providers.
• Downloading a brochure does not require you to give us any details.

4. Who receives your information

• Our web hosting provider, which runs the server and its logs on our behalf.
• Google, for statistics, only if you have accepted them.
• Professional advisers or authorities, where the law requires it or to protect our legal rights.

5. Transfers outside your country

Smartcode is based in Kenya. If you contact us from another country, your information is processed in Kenya so that we can answer you. Statistics data may be processed by Google in the European Union and the United States, as described above.

6. How we protect information

The website is only available over an encrypted HTTPS connection and uses modern browser security settings. Access to enquiries and statistics is limited to the staff who need it.

7. Your rights

Depending on where you live, you have the right to:

• be told how your information is used, and get a copy of it;
• have incorrect information corrected, or information deleted;
• object to or restrict how we use it;
• receive information you gave us in a portable format;
• withdraw consent at any time, without affecting what happened before (use Cookie settings for statistics).

To use any of these rights, email info@smartcode.co.ke. You can also complain to a data protection authority: in Kenya, the Office of the Data Protection Commissioner; in the European Union, the authority in the country where you live or work.

8. Children

This website is for business visitors and is not aimed at children.

9. Changes to this notice

We will update this notice when our website or the law changes. The date below shows the latest version.

Last updated: 3 October 2026