Privacy Policy

This Privacy Policy explains how theWambuidesign (“I”, “me”, “my” or “theWambuidesign”) handles personal information when you visit this website or contact me about my work and services.

I respect your privacy and aim to collect and use only information that is reasonably necessary for legitimate business purposes.

1. Who I am

theWambuidesign is an independent digital product and experience design practice operated by Diana Wambui, based in Kenya.

If you have any questions about this Privacy Policy or how your information is handled, you can contact me at: thewambuidesign@gmail.com

2. Information I may receive

This website does not currently operate an account system, newsletter, mailing list, customer portal or website-based payment system.

If you choose to contact me, you may provide information such as:

• Your name
• Your email address
• Your organisation or company
• Information about a project or potential engagement
• Any other information you choose to include in your email

Please avoid sending sensitive personal information unless it is genuinely necessary for your enquiry.

3. How information is collected

The website's contact links open your email application and direct you to contact me at thewambuidesign@gmail.com.

The website itself does not currently provide a form that stores enquiry submissions in a website database.

Once you send an email, the information you provide is handled through email services and systems involved in delivering and storing that message.

4. How I use your information

Information you provide may be used to:

• Respond to your enquiry
• Understand your project requirements
• Discuss potential work or collaboration
• Prepare proposals, scopes or quotations
• Communicate with you about an existing engagement
• Maintain appropriate business records
• Meet legal or contractual obligations where applicable

I will not use your contact information to add you to a newsletter or marketing mailing list without your permission.

5. Legal basis for processing

Where applicable, personal information may be processed because:

• You have asked me to take steps in relation to a potential engagement
• Processing is necessary to perform or discuss a contract
• Processing is necessary for legitimate business purposes
• You have given consent
• Processing is required by law

The applicable basis depends on the circumstances and the nature of the information involved.

6. Client confidentiality

Client confidentiality is important to my practice.

I will not publicly disclose confidential client information, unpublished product information, private business information, project materials, screenshots, results or performance metrics without appropriate permission.

Where I want to publicly discuss or display client work, including work shown in my portfolio, case studies, presentations or other public materials, I will seek permission where required before doing so.

This does not prevent me from using information where disclosure is required by law or where the information is already legitimately public.

7. Sharing information

I do not sell, rent or trade your personal information.

Information may be accessible to service providers that are necessary for operating my business, such as email, website hosting, infrastructure or other technical services.

Where third-party services process personal information on my behalf, I aim to use appropriate providers and take reasonable steps to protect the information involved.

I may also disclose information where required by law, legal process or a lawful request from an authorised authority.

8. Website hosting and technical information

This website is hosted using third-party web infrastructure and its source code is maintained through GitHub, with the website deployed through Netlify.

These services may process limited technical information as part of providing their infrastructure, security and hosting services. This can include information such as IP addresses, browser information, device information, timestamps or server logs, depending on the configuration and policies of those services.

I do not currently use the website to intentionally collect personal information for advertising or behavioural profiling.

9. Cookies and similar technologies

I do not intentionally use cookies on this website for advertising, behavioural profiling or marketing.

However, third-party hosting, infrastructure or embedded services may use cookies or similar technical mechanisms as part of their operation.

Because these technologies can change with service configuration or provider updates, this policy does not make a blanket claim that the website is entirely free of cookies.

10. Analytics

I do not currently operate a dedicated analytics or advertising-tracking programme on the website.

If this changes in the future, this Privacy Policy will be updated to explain the relevant technology, purpose and choices available to visitors where required.

11. How long information is retained

I retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries, managing professional relationships, maintaining business records and meeting legal or contractual obligations.

Retention periods may therefore vary depending on the nature of the information and the relationship involved.

When information is no longer reasonably required, I will take reasonable steps to delete or securely dispose of it.

12. Your rights

Depending on applicable law, you may have rights regarding your personal information, including the right to:

• Be informed about how your personal information is used
• Request access to personal information held about you
• Request correction of inaccurate or misleading information
• Request deletion or erasure where applicable
• Object to certain processing
• Request restriction of processing in applicable circumstances
• Request data portability where applicable
• Withdraw consent where processing is based on consent

These rights are subject to applicable legal conditions and exceptions.

To exercise a relevant right or ask a privacy question, contact: thewambuidesign@gmail.com

13. Security

I take reasonable measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission, email system or digital storage system can be guaranteed to be completely secure.

14. International processing

Some third-party technology and infrastructure providers used to operate this website or communicate with clients may process information outside Kenya.

Where applicable, such processing will be subject to the relevant safeguards and requirements under applicable data protection law.

15. Third-party websites

This website may contain links to other websites, platforms or services.

I am not responsible for the privacy practices, content or security of third-party websites. You should review their own privacy policies before providing them with personal information.

16. Changes to this policy

This Privacy Policy may be updated when my website, services, technology or legal obligations change.

The latest version will be published on this page with the relevant “Last updated” date.

17. Contact

For questions, requests or concerns regarding this Privacy Policy or the handling of your personal information: thewambuidesign@gmail.com