Privacy Policy

1. Introduction and Overview

Tefetro Studios ("we," "our," "us," or "the Company") is a creative architecture studio operating through its digital platform at https://tefetro.studio. We are committed to protecting the privacy and personal data of every individual who interacts with our business — whether as a visitor, prospective client, paying customer, or subscriber.

This Privacy Policy has been prepared in accordance with the Kenya Data Protection Act, 2019 (No. 24 of 2019) and its associated regulations, as well as broadly recognised international standards including the General Data Protection Regulation (GDPR) of the European Union, where applicable to our international clients.

2. Data Controller Information

Tefetro Studios is the Data Controller responsible for your personal data. If you have any questions, concerns, or requests relating to your personal data, please contact us using the details below. We will respond within 14 business days of receipt.

3. Information We Collect

We collect personal data through multiple channels and in various categories, as described below.

3.1 Information You Provide Directly

3.2 Information Collected Automatically

When you visit our Site, we automatically collect device and browser information (IP address, browser type, operating system), usage and navigation data (pages visited, time on page, referring URLs, clicks and scrolls), and session and analytics data through cookies and similar tracking technologies.

3.3 Information from Third Parties

We may receive information from payment processors (transaction confirmations), social media platforms (where you engage with our content), referral partners, and analytics providers (aggregated, anonymised data).

4. How We Use Your Information

We process your personal data only where we have a lawful basis to do so. Below are our processing purposes and the lawful basis for each.

5. Cookies and Tracking Technologies

Cookies are small text files placed on your device when you visit our Site. We use the following types:

You may accept or decline non-essential cookies when prompted by our cookie consent banner, adjust your browser settings, or delete cookies already stored on your device. For guidance, visit www.allaboutcookies.org.

6. Data Sharing and Disclosure

We may share your information only in the following limited circumstances:

7. Payment Processing

All payment transactions conducted through tefetro.studio are processed by trusted, PCI DSS-compliant third-party payment processors. We do not store, process, or transmit your full payment card information on our own servers.

When you submit payment information through our checkout, you are interacting directly with the payment processor's secure platform. We receive only limited confirmation data (amount, date, and a masked reference number) necessary for our records. We encourage you to review the privacy policy of any payment processor you use through our platform.

8. International Data Transfers

Tefetro Studios operates primarily from Kenya. Some of our third-party service providers may be located in, or process data in, other countries including the European Union or the United States.

Where personal data is transferred outside Kenya, we take steps to ensure adequate safeguards are in place, including contractual protections, use of service providers who comply with internationally recognised security standards, and reliance on adequacy decisions where applicable.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the stated purpose, or as required by applicable law. At the end of each retention period, data is securely deleted or anonymised.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction:

• SSL/TLS Encryption: All data transmitted between your browser and our Site is encrypted via HTTPS.
• Access Controls: Personal data is accessible only to authorised personnel on a need-to-know basis.
• Secure Storage: Data is stored on secured servers with restricted access and active monitoring.
• Password Security: User passwords are stored in hashed form using industry-standard algorithms.
• Incident Response: We maintain a data breach response procedure and will notify affected individuals and authorities as required by law.

While we take every reasonable precaution, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

11. Your Rights as a Data Subject

Under the Kenya Data Protection Act, 2019, and applicable international law, you have the following rights with respect to your personal data:

12. Children's Privacy

Our Site and services are not directed at or intended for use by children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted personal data without appropriate parental consent, we will take prompt steps to delete that information.

If you are a parent or guardian and believe a child under your care has provided us with personal data, please contact us immediately at privacy@tefetro.studio.

13. Digital Products and Downloads

When you purchase digital products, architectural drawings, or other downloadable content from tefetro.studio, we collect and retain data about your purchase including:

• The product(s) purchased and their associated license type
• Date and time of purchase
• Download history and access logs

This information is retained to verify legitimate ownership, administer license rights, resolve disputes, and comply with our intellectual property obligations. Please refer to our separate Digital Product License Terms for full details on permitted and prohibited uses of our downloadable content.

14. AI-Powered Tools and Features

Where our Site incorporates AI-powered tools (including chatbots, generative features, or automated assistance), please note:

• Conversations or inputs submitted to AI tools may be processed by third-party AI providers. We take reasonable steps to ensure such providers are bound by appropriate data protection obligations.
• AI tools are provided to assist and enhance your experience. They are not a substitute for professional legal, architectural, financial, or other specialist advice.
• We do not use AI tools to make fully automated decisions that produce significant legal effects without human oversight.

15. Third-Party Links and External Platforms

Our Site may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, or security of those external sites. We encourage you to review the privacy policies of any third-party site you visit through a link on our platform. This Privacy Policy applies solely to tefetro.studio and the data we collect and process directly.

16. Marketing Communications

Where you have provided consent, or where we otherwise have a lawful basis to do so, we may send you marketing communications about our services, new products, promotions, and studio updates.

Opting Out: You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting us at privacy@tefetro.studio. Opting out of marketing does not affect transactional messages related to your purchases or account.

17. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When material changes are made, we will:

• Update the "Last Updated" date at the top of this Policy
• Post the revised Policy on our Site
• Where appropriate, notify you by email or through a notice on our Site

Your continued use of our Site after the effective date of any revised Policy constitutes your acceptance of the changes.

18. Governing Law

This Privacy Policy is governed by and shall be construed in accordance with the laws of the Republic of Kenya, including the Kenya Data Protection Act, 2019.

Any dispute arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Kenya, unless otherwise required by applicable mandatory law in your jurisdiction.

19. Contact Us

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us. We aim to respond to all privacy-related inquiries within 14 business days.

20. Definitions