GOV-01 // DATA PRIVACY CHARTER

Corporate Data Privacy Policy & Kenya ODPC / GDPR Compliance Charter

Official data protection, sovereign data residency, cookie governance, and Personal Identifiable Information (PII) processing charter of Dulo Tech Limited (dulotech.co.ke), aligned with the Kenya Data Protection Act (2019) and EU GDPR.

Kenya Data Protection Act (2019) EU GDPR Art. 32 Aligned AES-256 & TLS 1.3 Encrypted Zero Third-Party PII Monetization

Contact Data Protection Officer View Security Directives

Corporate Data Privacy Policy & Kenya ODPC / GDPR Compliance Charter

DATA PRIVACY CHARTER // ODPC & GDPR

NODE: DT-KE-904-NBO Effective Date: October 2026 | Version 4.2

100%

Kenya ODPC Statutory Alignment

AES-256

At-Rest Cryptographic Standard

72 Hrs

Statutory Breach Notification SLA

Commercial Sale of Client Data

PRIVACY BY DESIGN

How Dulo Tech Limited Protects Personal & Institutional Data

Dulo Tech Limited ('we', 'us', or 'the Company'), headquartered at 12th Floor, Mirage Towers, Waiyaki Way, Westlands, Nairobi, Kenya, acts as both a Data Controller (for corporate website visitors, client contacts, and employees) and a Data Processor (when delivering cloud, cybersecurity, and managed support services to enterprise clients).

We enforce strict technical and organizational safeguards under the Laws of Kenya (Data Protection Act, No. 24 of 2019), the Office of the Data Protection Commissioner (ODPC) regulations, and international ISO/IEC 27701 & EU GDPR principles.

Lawful, Minimized & Purpose-Bound Processing of Corporate Contact Data

Sovereign Kenya-Resident Encrypted Vaults With Strict RBAC Access Logging

Immediate Execution of Data Subject Rights (Access, Rectification, Erasure)

Corporate Data Privacy Policy & Kenya ODPC / GDPR Compliance Charter

How Dulo Tech Limited Protects Personal & Institutional Data

24/7 Support