Skip to content
Centaora

Privacy Policy

Effective date: 24 August 2026

Centaora Group Ltd (“Centaora”, “we”, “us”) respects your privacy. This privacy policy explains what personal information we collect through centaora.com, why we collect it, how long we keep it, and the choices you have. It is written to meet the Kenya Data Protection Act, 2019.

1. Who we are

Centaora Group Ltd is a company registered in Kenya [COMPANY REGISTRATION NUMBER], with offices at [PHYSICAL ADDRESS, NAIROBI, KENYA]. We are the data controller for the information described in this policy.

Registered with the Office of the Data Protection Commissioner (ODPC): [ODPC REGISTRATION NUMBER, or delete this sentence until registration is complete].

For any privacy question or request, contact us at info@centaora.com.

2. What we collect and why

When you subscribe to The Centaora Signal or other updates

  • What: your email address and, if you give them, your first name, how you are reading (for example individual, non-profit, business, government or academic), your sector and your organisation. We also record which topics you chose, when you agreed, and which page you signed up from.
  • Why: to send you the emails you asked for and to understand, in total, who our readers are.
  • Legal basis: your consent. You can withdraw it at any time.

When we send you an email

  • What: whether an email was opened and which links in it were clicked.
  • Why: to learn which content is useful and to report overall readership figures.
  • Legal basis: your consent, given when you subscribed.

When you read The Signal on our website

  • What: a count of visits to each edition and whether a visitor reached the end. For this we use an anonymous code that changes every day. We do not store your IP address for this purpose. If you have subscribed, the visit is linked to your subscriber record so that we do not ask you to sign up again.
  • Why: to measure readership of each edition.
  • Legal basis: our legitimate interest in understanding how our publication is used.

When you contact us or share your work

  • What: your name, email address, organisation, and whatever you write in the form, including any links you provide.
  • Why: to reply to you and, for work shared with The Signal, to consider it for a future edition.
  • Legal basis: our legitimate interest in responding to you, and your consent where you ask to be added to our mailing list.

When you buy from us or create an account

  • What: your name, email address, billing details, what you bought and your account login.
  • Why: to deliver what you paid for, give you access, and keep the financial records the law requires.
  • Legal basis: performing our contract with you and meeting our legal obligations.
  • Payments: card and mobile-money payments are handled by our payment providers, Paystack and Flutterwave. We do not see or store your full card details.

When you use our tools

  • What: the information you enter into tools such as Resource Finder, Centaora Certify and our branding tools, and the results they produce.
  • Why: to provide the tool and its results to you.
  • Legal basis: performing our contract with you, or your consent.
  • AI-assisted tools: [CONFIRM AND KEEP IF ACCURATE: Some tools use an artificial-intelligence service provided by Anthropic to generate results. The information you enter into those tools is sent to that service for this purpose only.]
  • Certificates: if you use Centaora Certify to issue certificates to other people, you are responsible for having their permission to share their names with us. We use that information only to produce your certificates.

When you apply to work with us

  • What: your contact details, CV and anything else you submit with an application.
  • Why: to assess your application and communicate with you about it.
  • Legal basis: steps taken at your request before entering into a contract.

3. Cookies

We use a small number of cookies, which are small files stored on your device:

  • Reader cookie (centaora_reader, kept for one year): remembers that you have signed up, so that editions of The Signal open without asking you again.
  • Account and shopping cookies: keep you signed in and remember your basket when you buy from us.

[CONFIRM ONE: “We do not use advertising cookies or third-party analytics.” OR list the analytics tool you use, for example Google Analytics, and what it collects.]

You can delete or block cookies in your browser settings. If you block the reader cookie, you may be asked to sign up again to read a full edition.

4. Who we share information with

We do not sell your personal information. We share it only with service providers who help us run our services, and only as far as they need it:

  • our website hosting provider [Namecheap (EasyWP) — CONFIRM];
  • our email delivery provider [NAME OF THE SERVICE THAT SENDS YOUR WEBSITE EMAIL];
  • our payment providers, Paystack and Flutterwave;
  • [the AI service provider named above, for AI-assisted tools — KEEP IF ACCURATE].

Sponsors and partners receive only overall figures, such as the number of readers, the mix of sectors, and open and click rates. We never give them names, email addresses or any information that identifies you.

We may also disclose information where the law requires it.

5. Transfers outside Kenya

Some of our service providers store information on servers outside Kenya. Where this happens, we rely on your consent or on appropriate safeguards as required by the Data Protection Act, and we use providers that commit to protecting your information.

6. How long we keep information

  • Subscriber details: for as long as you remain subscribed. If you unsubscribe, we keep only what is needed to make sure we do not email you again, and delete the rest within [12 MONTHS — CONFIRM].
  • Enquiries and shared work: up to [24 MONTHS — CONFIRM] after our last contact with you.
  • Purchase records: [7 YEARS — CONFIRM WITH YOUR ACCOUNTANT], as required for tax and accounting.
  • Job applications: up to [12 MONTHS — CONFIRM] after the role is filled, unless you ask us to keep them longer.
  • Readership counts: kept as anonymous totals.

7. Your rights

Under the Data Protection Act, 2019 you have the right to:

  • be told how your information is used;
  • see the information we hold about you;
  • have inaccurate information corrected;
  • have your information deleted;
  • object to, or ask us to limit, how we use your information;
  • receive your information in a form you can take elsewhere;
  • withdraw your consent at any time.

Emails: every email we send has a link to choose which topics you receive and a link to unsubscribe.

Other requests: email info@centaora.com. We will respond within [14 DAYS — CONFIRM] and may ask you to confirm your identity first.

If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.

8. How we protect your information

Our website uses encrypted connections (HTTPS), access to subscriber and customer records is limited to authorised people, and links in our emails are protected against tampering. No system is completely secure. If a breach creates a real risk of harm to you, we will tell you and the ODPC as the law requires.

9. Children

Our services are intended for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy as our services change. The date at the top shows when it was last revised. If a change is significant, we will tell subscribers by email.

11. Contact

Centaora Group Ltd
Email: info@centaora.com