Legal

Privacy Policy

Kenya (KE)Version 2026-10-01.2 (Kenya)

This policy applies to visitors to poultrydesk.co.ke and to people using an Organization billed in Kenya. If your Organization is billed elsewhere, the Global privacy policy applies.

Who we are

PoultryDesk is operated by POULTRYDESK SYSTEMS LIMITED, a company incorporated and registered in Kenya. For any privacy question or request, email privacy@poultrydesk.com.

We are the controller of the personal data in your account, billing and support records, and of data about visitors to our public pages. For the farm records your Organization captures, your Organization is the controller and we are its processor: we handle those records only to run the service for you. Data processing terms are available on request.

What we collect

Account details: name, email address, role, and the Organization and subdomain you belong to.
Farm records your Organization captures: lots, daily rounds, mortality, feed, eggs, health treatments, inventory, sales and expenses.
Technical data needed to run the service: device and session identifiers, sync state, and security and audit logs.
Billing records for paid plans: plan, invoices and payment status. We do not store full card numbers.

How we use it

We use your data to run the service you signed up for: to store and sync your records, control access and plan features, produce your reports, keep an audit trail for traceability, bill your subscription, and contact you about your account. We do not sell personal data.

Where your data is stored

The service is hosted with Amazon Web Services in the European Union (Ireland). Your data is therefore stored outside Kenya.

Who processes data for us

We use service providers for hosting (Amazon Web Services), email and SMS delivery, payments (DPO Pay) and, only if you allow it, public-site analytics (Google Analytics). Each receives only what it needs to do its job. The full list is available on request.

Your rights

Under the Kenya Data Protection Act, 2019, you have the right to be informed about how your data is used, to access it, to object to its processing, to have inaccurate or misleading data corrected, to have false or misleading data deleted, and to receive your data in a portable format.

Email privacy@poultrydesk.com to use any of these rights. We aim to acknowledge your request within 7 days and to respond in full within the time the Act and its regulations require. For farm records your Organization captured, contact your Organization first; we help it respond.

If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner.

Transfer outside Kenya

The service is hosted in the European Union, so your data is transferred outside Kenya. We rely on contractual safeguards with our hosting provider, including its data processing addendum, and keep the transfer documented.

Optional public-site analytics

When enabled, Google Analytics 4 helps us understand visits to our public pages, documentation, blog and sign-up page on poultrydesk.com and poultrydesk.co.ke. It is off until you choose Allow cookies. Rejecting it does not affect access to the site or your account, and no analytics request is sent to Google before you allow it.

Analytics receives a public page category, which site you are on (Kenya or Global), which of our listed buttons and steps you use (for example a plan button, the monthly or yearly switch, starting the sign-up form, changing to a country in the other market, sending a demo request, or the site region suggestion), basic browser and device information, and a random identifier that lasts only while the analytics frame remains open. Google receives your IP address when your browser connects to its service and may process information outside your country. We do not send form entries, names, email addresses, Organization identifiers, query strings, URL fragments or referring URLs. Documentation and blog addresses are grouped into categories rather than sent individually. Analytics is not loaded on sign-in, activation, account handoff, tenant, custom-domain, staging or admin pages.

The analytics script runs on a separate analytics-only subdomain, in a frame isolated from the site's pages, forms, cookies and browser storage. A fresh random identifier is used on each page load rather than a persistent profile. Advertising consent and Google signals are disabled. For analytics we save only your allow or reject choice in your browser's local storage for the current public site, until you change it or clear that storage. Essential account and security cookies are separate from this choice.

Use Cookie settings in the site footer to change your choice at any time. Rejecting stops future collection; it does not delete data Google has already received. If analytics is disabled for the site, these controls are not shown. See Google's privacy policy.

Site region suggestion

On the home, pricing, sign-up and demo request pages we may suggest the other PoultryDesk site (Kenya or Global). Your browser decides this from your device's time zone and language settings, which are not sent to us or to anyone else. If you dismiss the suggestion or switch sites, we remember that on your device for 90 days. It is not sent to us.

Tenant isolation

Each Organization's farm records live in their own database schema. There is no shared table through which one Organization can read another's records. Access within an Organization is governed by roles and permissions that the Organization controls.

Retention

We keep farm records for as long as your Organization is active, so your traceability and audit history stay intact. When an Organization is closed, its records enter a defined retention window and are then deleted or anonymised. Some records, such as audit and food-safety trails and tax records, may be kept longer where the law requires it.