WEBSITE PRIVACY NOTICE
Echo Kenya
Last Updated 5 October 2026
1. About this Privacy Notice
At Echo Kenya, we take the privacy and protection of personal information seriously. This Privacy Notice explains how Echotel International Kenya Limited, trading as Echotel Kenya (“Echo Kenya”, “we”, “us” or “our”), collects, uses, stores and protects personal information when you visit our website, contact us through the website or otherwise interact with us through it.
It also explains who we may share your information with, where it may be processed, how long we keep it and your rights in relation to your personal information.
This Privacy Notice has been prepared with reference to Kenya's Data Protection Act, 2019 and applicable regulations administered by the Office of the Data Protection Commissioner (ODPC).
2. Who is responsible for your information?
The organisation responsible for personal information processed through this website is:
Echotel International Kenya Limited, trading as Echotel Kenya
West End Towers, Wing B, off Waiyaki Way, Westlands, Nairobi, Kenya
For questions about this Privacy Notice or the way we handle your personal information, please contact:
Data Protection Officer: Simon Njuguna
Email: privacy@echogroup.africa
3. What information do we collect?
The information collected depends on how you interact with the website. When you contact us through our website, we may collect:
- your first and last name;
- company or organisation;
- email address;
- telephone number;
- information you include in your enquiry; and
- technical information associated with your interaction or submission, including your IP address and the page from which an enquiry was submitted.
We may also process limited technical information necessary to operate, maintain and secure our website, including information used to identify and prevent spam, fraud and automated abuse.
Please do not include sensitive personal information in the free-text enquiry field unless it is necessary for us to assist you.
4. How do we use your information?
We may use personal information collected through the website to:
- receive, manage and respond to your enquiries;
- communicate with you about the products, services or support you have asked about;
- manage subsequent business discussions arising from your enquiry;
- operate, maintain and secure our website;
- identify and address technical problems, misuse or security threats;
- maintain appropriate business records; and
- meet applicable legal and regulatory requirements.
We process personal information for explicit and legitimate purposes and do not use it in a way that is incompatible with those purposes unless permitted or required by law.
5. Our basis for processing your information
Depending on the circumstances, we may process your personal information where:
- it is necessary to take steps at your request before entering into a contract or to perform a contract with you;
- processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your rights and interests;
- processing is necessary to comply with a legal obligation;
- you have given consent where consent is required; or
- another lawful basis under applicable Kenyan law applies.
Where we rely on consent, you may withdraw that consent, subject to applicable law. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
6. Who may we share your information with?
We do not sell your personal information. Personal information may be shared where reasonably necessary with:
- authorised Echo personnel who need the information to respond to or manage your enquiry;
- other Echo companies where their involvement is necessary to provide the information, service or support you have requested;
- service providers that support our website, hosting, email, security and IT operations;
- professional advisers where necessary; and
- regulators, courts, law-enforcement authorities or other bodies where disclosure is required or permitted by law.
Where service providers process personal information on our behalf, we expect them to handle it securely and in accordance with applicable data-protection requirements.
7. International processing and transfers
Some of the technology infrastructure used to operate the Echo Kenya website is located outside Kenya.
Personal information submitted through this website is hosted and stored using infrastructure located in the United Kingdom. Website enquiry notifications are also processed using email infrastructure located in the United Kingdom.
This means that personal information submitted through the website may be transferred from Kenya and processed or stored in the United Kingdom.
Kenyan data-protection law regulates transfers of personal information outside Kenya. Before making such a transfer, a controller or processor must establish an applicable transfer basis, which may include appropriate safeguards, an adequacy decision, necessity or the data subject's consent. Where appropriate safeguards are relied upon, the Regulations impose additional assessment and documentation requirements.
We take steps required under applicable law to ensure that personal information transferred outside Kenya receives appropriate protection.
8. How long do we keep your information?
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including managing an enquiry or subsequent business relationship and meeting applicable legal, regulatory, accounting or record-keeping requirements.
Website enquiries will ordinarily be retained for five years, unless there is a legitimate or legal reason to retain particular information for longer.
Technical information such as IP addresses will be retained for five years, where collected.
When personal information is no longer required, we will delete, anonymise or securely dispose of it as appropriate.
9. How do we protect your information?
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
We also take reasonable steps to ensure that third parties processing personal information on our behalf provide appropriate protection.
No internet-based system can be guaranteed to be completely secure. We therefore review our website and information-handling arrangements and take appropriate action where risks are identified.
10. Cookies and website technologies
Our website is primarily used to provide information about Echo Kenya and enable visitors to contact us. We use Google reCAPTCHA to help protect website forms against spam, fraud and automated abuse. reCAPTCHA processes limited technical and interaction information to assess whether an interaction is likely to be legitimate and may set a necessary security cookie (_GRECAPTCHA) for this purpose. Google processes this information on our behalf as a service provider.
We do not currently use Google Analytics or other advertising analytics through MonsterInsights on this website. Our technical review has not identified a current implementation of non-essential analytics or advertising cookies across the Echo websites.
If we introduce non-essential analytics, advertising or other tracking technologies in future, we will update our privacy and cookie information and introduce consent controls where required.
11. Direct marketing
If you contact us about our products or services, we may use your information to respond to your enquiry, manage any subsequent sales discussion and, where you have agreed to receive marketing communications, keep you informed about relevant Echo products, services, solutions or updates.
Where required by law, we will ask for your consent before using your personal information for direct marketing.
You can withdraw your consent or ask us to stop sending marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us at privacy@echogroup.africa.
Stopping marketing communications will not prevent us from contacting you where necessary to respond to an enquiry, provide a requested service or manage an existing business relationship.
12. Your rights
Under Kenya's data-protection framework, you have rights concerning your personal information. These include the right:
- to be informed about how your personal information will be used;
- to access personal information held about you;
- to object to the processing of all or part of your personal information;
- to request correction of false or misleading information; and
- to request deletion of false or misleading information about you.
The Act and regulations may provide additional rights or procedures depending on the particular processing involved. To exercise a right or ask a question about your personal information, contact: privacy@echogroup.africa. We may ask for information necessary to verify your identity before responding to a request.
13. Links to other websites
Our website may contain links to websites or online services operated by other organisations.
Echo Kenya is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy information provided by the relevant organisation before giving it personal information.
14. Children's personal information
Our website and Echo's services are intended primarily for businesses and business users and are not directed at children.
We do not knowingly use the website to solicit personal information from children. If we become aware that children's personal information has been submitted in circumstances where it should not have been collected, appropriate action will be taken in accordance with applicable law.
15. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in Echo's operations, the website, technology or applicable legal and regulatory requirements.
The current version will be published on this website and the Last updated date at the top of the notice will be changed when the notice is revised.
16. Contact us about privacy
If you have a question about this Privacy Notice, want to exercise a privacy right or have a concern about the way we have handled your personal information, please contact:
Echotel International Kenya Limited, trading as Echotel Kenya
West End Towers, Wing B, off Waiyaki Way, Westlands, Nairobi, Kenya
Data Protection Officer: Simon Njuguna
Email: privacy@echogroup.africa
17. Complaints
You may also lodge a complaint concerning the processing of your personal information with Kenya's Office of the Data Protection Commissioner (ODPC).