Privacy policy

Last updated: 2 November 2026

This policy explains how Devlan Solutions Ltd ("Devlan") handles personal data in BUNEXA, in line with Kenya's Data Protection Act, 2019.

Our roles

For the account details of the people who sign up and use BUNEXA, and for messages sent through this website, Devlan is the data controller. For your own customers' and staff records that you enter into BUNEXA, you are the controller and Devlan acts as your data processor.

What we collect

  • Account details: business name, your name, email, phone number and business code.
  • Business data you enter: products, stock, sales, customers, expenses and staff.
  • Contact form messages and the details you include.
  • Technical data: IP address, browser type and security logs, used to protect the service and prevent abuse.

Why we use it

To provide and secure the service, to respond to you, to prevent abuse, and to meet legal obligations. We do not sell personal data.

Cookies

We use a strictly necessary session cookie for sign-in and form security. We do not use advertising cookies on this site.

How we protect it

Each business's data is kept secure. Passwords are hashed, integration secrets are encrypted at rest, access is role-based, sensitive actions are logged and backups are taken regularly. No system is perfectly secure, and we will tell affected people and the regulator where the law requires.

Sharing

We share data only with service providers who help us run BUNEXA (such as hosting), under obligations to protect it, or where the law requires.

Retention

We keep account data while your account is active and for a reasonable period afterwards, and keep records the law requires. Contact form messages are kept as long as needed to respond.

Your rights

Under the Data Protection Act you may ask to access, correct or delete your personal data, object to or restrict processing, and complain to the Office of the Data Protection Commissioner. Contact us to make a request.

Changes

We will update this page when our practices change and show the date above.