Privacy Policy

Last Updated: 8 September 2026

Bright Arm Enterprise (“Bright Arm Enterprise”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you visit our website, contact us, subscribe to our newsletter, or engage our services.

By using our website or providing us with your information, you acknowledge the practices described in this Privacy Policy.

1. Who We Are

Bright Arm Enterprise is a Kenya-based solutions enterprise providing technology, digital, business, research, and impact-focused solutions.

For questions concerning this Privacy Policy or the handling of your personal information, contact us at:

Email: info@brightarm.co.ke

Location: Kenya


2. Information We Collect

Depending on how you interact with Bright Arm Enterprise, we may collect the following information:

Information You Provide Directly

When you contact us, request a consultation, or enquire about our services, we may collect:

  • Full name
  • Email address
  • Phone number
  • Organization or business name
  • Project information
  • Enquiry details
  • Other information you voluntarily provide

Newsletter Information

If you subscribe to our newsletter, we may collect:

  • Name
  • Email address
  • Newsletter preferences

Technical Information

When you visit our website, certain technical information may be collected automatically, including:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages visited
  • Referring website
  • Approximate usage information
  • Date and time of visits

This information may be collected through website analytics, cookies, or similar technologies.


3. How We Use Your Information

We may use personal information to:

  • Respond to enquiries and requests
  • Provide consultations
  • Prepare quotations and proposals
  • Deliver and manage our services
  • Communicate with clients and partners
  • Provide technical support
  • Manage project activities
  • Send newsletters and updates where you have subscribed
  • Improve our website and services
  • Understand how visitors use our website
  • Maintain website security
  • Prevent fraud, abuse, or unauthorized activity
  • Meet applicable legal and regulatory requirements

We will only use your information for purposes that are reasonably connected to our business activities and your interaction with us.


4. Legal Basis for Processing

Where applicable, we process personal information on the basis of:

  • Your consent
  • The performance of a contract or steps taken before entering into a contract
  • Compliance with legal obligations
  • Legitimate business interests
  • Other lawful grounds permitted under applicable data-protection laws

Where processing is based on consent, you may withdraw that consent subject to applicable legal and contractual limitations.


5. Newsletter and Marketing Communications

If you subscribe to our newsletter, we may use your email address to send information about:

  • Bright Arm Enterprise updates
  • Technology and digital innovation
  • New services
  • Projects and initiatives
  • Research and knowledge
  • Sustainability and impact projects
  • Other relevant business updates

You can unsubscribe from marketing communications at any time by using the unsubscribe option included in our emails or contacting us directly.

We do not intend to send unnecessary or unsolicited marketing communications.


6. Cookies

Our website may use cookies and similar technologies to improve functionality, understand website usage, and enhance your experience.

Cookies may be used for purposes such as:

  • Website functionality
  • Security
  • Analytics
  • Performance monitoring
  • Remembering preferences

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect some website functionality.


7. Analytics

We may use analytics tools to understand how visitors interact with our website.

Analytics information may help us understand:

  • Which pages are visited
  • How visitors navigate the website
  • Website performance
  • General visitor trends
  • How we can improve our content and services

Where third-party analytics services are used, their processing of information may also be governed by their respective privacy policies.


8. How We Share Information

We do not sell your personal information.

We may share information where reasonably necessary with:

  • Employees or authorized members of our team
  • Contractors working on your project
  • Technology and hosting providers
  • Email and communication service providers
  • Payment or service providers where necessary
  • Professional advisers
  • Government authorities or regulators where legally required

We aim to share only information that is reasonably necessary for the relevant purpose.


9. Third-Party Services

Our website or services may use third-party platforms and technologies, including hosting providers, analytics services, payment providers, email platforms, APIs, plugins, and other software services.

These providers may process information according to their own privacy policies and terms.

Bright Arm Enterprise does not control the privacy practices of independent third-party providers.


10. Data Security

We take reasonable technical and organizational measures to protect personal information against:

  • Unauthorized access
  • Accidental loss
  • Destruction
  • Misuse
  • Unauthorized disclosure
  • Unauthorized alteration

However, no internet transmission, website, or digital storage system can be guaranteed to be completely secure.


11. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to:

  • Provide services
  • Maintain business records
  • Resolve disputes
  • Meet contractual obligations
  • Comply with legal requirements
  • Protect our legitimate interests

When information is no longer required, we may securely delete, anonymize, or otherwise dispose of it.


12. Your Privacy Rights

Subject to applicable law, you may have rights concerning your personal information, including the right to:

  • Request access to personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of information where legally applicable
  • Object to certain forms of processing
  • Request restriction of processing in applicable circumstances
  • Withdraw consent where processing is based on consent
  • Request information about how your personal information is processed

To exercise a privacy right, contact us using the details provided below.

We may need to verify your request before processing it.


13. Children’s Privacy

Our website and services are not intentionally directed at children.

We do not knowingly collect personal information from children through our website without appropriate authorization or a lawful basis.

If you believe a child has provided personal information to us improperly, please contact us so that we can review and take appropriate action.


14. Client and Project Information

When providing software development, research, consultancy, website, or other services, we may receive information belonging to our clients or their users.

Where we process such information on behalf of a client, our responsibilities may also be governed by the relevant project agreement, contract, data-processing arrangement, or other written agreement.

Clients remain responsible for ensuring that information they provide to us has been collected and shared lawfully.


15. Links to Other Websites

Our website may contain links to third-party websites and services.

We are not responsible for the privacy practices, content, security, or policies of external websites.

We encourage visitors to review the privacy policies of third-party websites before providing them with personal information.


16. International Data Transfers

Some technology or service providers we use may process information outside Kenya.

Where personal information is transferred or processed across borders, we will take reasonable steps to ensure that the processing is carried out in accordance with applicable data-protection requirements.


17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable laws.

When we make changes, we will update the Last Updated date at the top of this page.

We encourage you to review this page periodically.


18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, contact us:

Bright Arm Enterprise

Email: info@brightarm.co.ke

Location: Kenya

Privacy Enquiries

Please include “Privacy Enquiry” in the subject line of your email where possible.


19. Data Protection Complaints

If you believe your personal information has been handled in a way that violates applicable data-protection requirements, you may first contact Bright Arm Enterprise so that we can review and address your concern.

You may also have the right to lodge a complaint with the relevant data-protection authority in accordance with applicable law.


Bright Arm Enterprise

Technology. Innovation. Impact.