Privacy
How we handle your information
This notice explains what The Wise Pen N’ Paper collects when you use this website, why we hold it, and what you can ask us to do with it. It is written to meet our obligations under Kenya's Data Protection Act, 2019.
Who is responsible
The Wise Pen N’ Paper is the data controller for the information described here. You can reach us at info@wisepennpaper.co.ke · +254 769 1538 21 · Nairobi, Kenya.
What we collect, and why
- Project enquiries. Your name, email address, telephone number, and optionally your organisation and location, together with the project details you describe and any manuscript or artwork you attach. We use these to assess the work, prepare a quotation and reply to you.
- Consultation bookings. Your name, contact details, the type of consultation and your preferred date and time, so that we can arrange the appointment.
- Messages. Anything you send through the contact form, so that we can answer it.
- Accounts. If you create a client account, your name, email address, telephone number and a password we never store in readable form. Signed-in clients can also exchange messages with us about their project.
- Security records. Sign-in times, the IP address a request came from, and the browser reported by your device. These let us detect unauthorised access to accounts and are kept separate from the project work itself.
We ask for consent before you submit an enquiry. Where you are already a client, we also rely on the performance of our agreement with you, and on our own legal obligations for records such as invoices.
Manuscripts and other files
Work you upload stays private to you and the staff handling your project. Files are stored under names generated by our server, outside the publicly reachable part of the site, and are never listed or linked publicly. Downloading one requires signing in, and we record who downloaded what and when.
Who else sees it
We do not sell your information, and we do not share it for advertising. This site runs no analytics or advertising trackers, and sets no third-party cookies. Information is disclosed only to the people working on your project, to service providers who host this site or carry our email, and where the law requires it. Typefaces are loaded from Google Fonts, which means your browser contacts Google's servers when a page loads.
Cookies
We use two, both strictly necessary and neither used for tracking: one keeps you signed in, and one protects forms against cross-site request forgery. Your choice of light or dark theme is remembered in your own browser and never reaches us.
How long we keep it
Enquiries and their attachments are kept for as long as we are in discussion with you and for a reasonable period afterwards, in case the project resumes. Client project records, invoices and quotations are kept for as long as our business and tax obligations require. Security records are kept only as long as they are useful for investigating account misuse. You can ask us to delete anything we are not legally required to keep.
Your rights
Under the Data Protection Act you may ask us for a copy of the information we hold about you, ask us to correct anything inaccurate, ask us to delete it, object to a particular use, or withdraw a consent you gave earlier. Withdrawing consent does not affect anything done before you withdrew it. Write to us using the details above and we will respond within the statutory period. If you are not satisfied with our answer, you may complain to the Office of the Data Protection Commissioner.
Keeping it secure
The site is served over HTTPS. Passwords are stored only as irreversible hashes, staff accounts require a second factor in addition to a password, uploaded files are checked against their real format before being stored, and access to client records is restricted by role and recorded.
Changes
If this notice changes materially we will say so on this page. Please check it when you submit something new.