Privacy Policy

Last updated: 27 June 2026

StrongNet WiFi ("we", "us") is committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019 ("KDPA") and guidance issued by the Office of the Data Protection Commissioner ("ODPC").

1. Data we collect

• Identification: full name, ID/passport number (for KYC), date of birth.
• Contact: phone number, email address, physical/installation address.
• Service: package selected, router/ONT details, MAC addresses, IP allocations, usage and session logs.
• Payment: M-Pesa transaction references, receipt numbers (we do not store card or PIN data).
• Support: messages, tickets and call records you share with our team.

2. How we use your data

• To provision, deliver and maintain your internet service.
• To bill, reconcile payments and prevent fraud.
• To diagnose faults, plan capacity and improve network quality.
• To send service notices and respond to support requests.
• To comply with lawful requests from the Communications Authority of Kenya and other regulators.

3. Sharing

We share data only with: (a) upstream carriers and equipment vendors strictly to deliver the service; (b) M-Pesa/Daraja for payment processing; (c) authorities where compelled by law. We do not sell your data.

4. Retention

Account and billing records are kept for the duration of your service plus seven (7) years to meet tax and regulatory obligations. Session logs are retained for twelve (12) months. Support recordings are retained for ninety (90) days.

5. Your rights

Under the KDPA you may request access, correction, deletion, restriction or portability of your personal data, and you may object to processing. Email privacy@getstrongnet.shop. We respond within thirty (30) days.

6. Security

We apply encryption in transit (TLS), role-based access controls, audit logging, and least-privilege administration. Our hosting provider is ISO 27001 certified. Despite these measures, no system is perfectly secure.

7. Breach notification

In the event of a personal data breach affecting your rights, we will notify the ODPC within seventy-two (72) hours and notify affected customers without undue delay, as required by section 43 of the KDPA.

8. Data controller

StrongNet WiFi is the data controller. ODPC registration is in progress; our registration number will be published here once issued. Complaints may be lodged with the ODPC at odpc.go.ke.

9. Contact

Data Protection Officer — privacy@getstrongnet.shop