Privacy Policy

Introduction

Cygnus Safety Consulting Ltd is committed to protecting the privacy of visitors to our website and clients who use our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and the rights available to you.

Scope

This policy applies to personal data processed in connection with:

• visiting our website cygnus.co.ke;
• our training, consultancy and advisory services (including Kaizen and NCA CPD training);
• communications you send to us (email, phone, social media); and
• any other interaction where we collect personal data.

Personal data we collect

Depending on how you interact with us, we may collect:

• Contact information: name, email address, phone number, job title, company name.
• Business information: company size, industry, service interests, project descriptions.
• Transactional data: invoices, payment details (we do not store full card details).
• Technical data: IP address, device and browser information, cookies and usage data when you use our website.
• Communications: records of correspondence and notes from meetings or calls.

How we use personal data

We use personal data for purposes including:

• providing and improving our services and training;
• responding to enquiries and managing bookings and registrations;
• processing payments and sending invoices;
• communicating about events, updates and opportunities (where you have consented or where we have a legitimate interest);
• complying with legal or regulatory obligations; and
• security, fraud prevention, and analytics to improve our website and services.

Legal basis for processing

Under applicable law (including Kenyan data protection principles), we rely on one or more of the following legal bases to process personal data:

• performance of a contract (e.g., delivering a training or consultancy engagement);
• your consent (for marketing communications and cookies where required);
• legitimate interests (e.g., improving services, site analytics, preventing fraud); and
• compliance with legal obligations (e.g., tax and accounting requirements).

Cookies and tracking

We use cookies and similar technologies to operate the site, deliver functionality, and analyze usage. You can control cookies using your browser settings. For detailed information, consult the cookie banner or settings on our site.

Who we share data with

We may share personal data with:

• third-party service providers who support our operations (e.g., payment processors, email services, analytics providers);
• professional advisors (lawyers, accountants) where necessary;
• government or regulatory authorities when required by law;
• other parties with your consent (for example, when you request introductions or references).

We require third parties to process personal data securely and only for the purposes we specify.

International transfers

Some service providers we use may be located outside Kenya. When personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place (such as contractual protections) to protect your data.

Data retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements.

Security

We use technical and organisational measures to protect personal data from unauthorised access, loss, misuse or alteration. While we endeavour to protect data, no electronic system is completely secure; we cannot guarantee absolute security.

Your rights

Depending on applicable law, you may have rights including:

• the right to access personal data we hold about you;
• the right to correct inaccurate or incomplete information;
• the right to request deletion (where permitted by law);
• the right to restrict or object to processing in certain circumstances;
• the right to withdraw consent (for processing based on consent); and
• the right to request portability of your data in a common machine-readable format.

To exercise your rights, contact us using the details below. We will respond in accordance with applicable law.

Children’s privacy

Our website and services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will take steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact

If you have questions, requests, or complaints about this Privacy Policy or our processing of personal data, contact our data protection lead: