Privacy Policy

Last updated October 15, 2026

1. Who I am

This Privacy Policy explains how StorageCore, a private limited company registered in Kenya that works as an independent AWS storage consultancy based in Nairobi ("StorageCore", "I", "me" or "my"), handles personal information collected through the website at storagecore.xyz (the "Site") and when you contact me about my services. StorageCore is the data controller for that information.

You can reach me at inquiry@storagecorebiz.xyz.

2. What this policy covers

This policy covers information about visitors to the Site and people who contact me. When I do paid work for a client, any personal data inside the client's systems is handled on the client's instructions under our written agreement, not under this policy.

3. Information I collect

Information you send me: your name, email address, phone number, company, the contents of your messages, and any details about your AWS setup that you choose to share.
Information from calls and meetings: notes I take during a free bill review or a client call.
Technical information from your visit: when you open the Site, your browser connects to the server that hosts it, and to Google's servers to load fonts. That includes your IP address, browser and device type, the page requested and the time. My hosting provider may keep server logs of this for security and operation.

I do not use analytics or advertising trackers on the Site. Please do not send passwords, AWS access keys or other secrets, or sensitive personal, financial or health data, by email or phone.

4. Cookies

The Site does not set cookies of its own and does not use analytics or advertising cookies. Fonts are loaded from Google, which may receive your IP address and browser information when it serves them. If I add analytics or any other tool that uses cookies or similar technologies, I will update this policy first and ask for consent where the law requires it.

5. How I use information, and why

To reply to your enquiry and take steps you ask for before we agree any work. Basis: steps at your request before a contract, and my legitimate interest in answering people who contact me.
To provide services and manage our relationship, including scoping, invoicing and support. Basis: performing a contract.
To keep business, tax and accounting records. Basis: legal obligation.
To keep the Site and my business secure and to prevent abuse. Basis: legitimate interests.
For anything else, such as sending you updates you have not asked for, I will ask for your consent first. I do not send marketing email without it.

6. Who I share it with

I do not sell personal information. I share it only with providers who help me run the Site and my business, such as website hosting, email, calendar and video call tools, and invoicing and payment services; with Google, for fonts, as described above; with professional advisers such as lawyers and accountants; and with authorities where the law requires it. These providers may use the information only to provide their service or as their own terms and the law allow.

7. Transfers outside your country

I am based in Kenya, and some of my providers operate in other countries. Where information is transferred across borders, I rely on the safeguards that the applicable law requires, such as contractual protections or your consent where needed.

8. How long I keep it

Enquiries that do not lead to work: up to 24 months after our last contact, then deleted.
Client records: for the length of the engagement and for as long afterwards as tax, accounting or other law requires, or as is needed to handle a legal claim.
Client system data: only as long as the work needs it, and deleted when the work ends, as our agreement says.

9. Security

I use reasonable technical and organisational measures to protect personal information, including access controls and multi-factor authentication on my accounts. No method of storage or transmission is completely secure, so I cannot guarantee absolute security. If you think your information has been compromised, please tell me straight away.

10. Your rights

Under Kenya's Data Protection Act, 2019, and where they apply the GDPR or similar laws, you may have the right to:

ask for a copy of the personal information I hold about you;
have inaccurate information corrected or incomplete information completed;
ask me to delete your information, or to restrict how I use it;
object to my use of it, including where I rely on legitimate interests;
receive your information in a portable format, where that right applies; and
withdraw consent at any time, where I rely on consent.

To use any of these rights, email inquiry@storagecorebiz.xyz. I will reply within the time the law requires. I may need to confirm your identity first. I do not make decisions about people using solely automated processing.

You may also complain to the Office of the Data Protection Commissioner in Kenya (odpc.go.ke), or to the data protection authority in the country where you live or work. I would appreciate the chance to put things right first.

11. Children

The Site and my services are for businesses and are not directed at anyone under 18. I do not knowingly collect personal information from children.

12. Links to other sites

The Site links to third-party sites, such as professional and certification profiles. They have their own privacy policies, and I am not responsible for them.

13. Changes to this policy

I may update this policy from time to time. The date at the top of the page shows when it was last changed. If I make a significant change, I will say so on the Site.

14. Contact

Questions or requests about this policy: inquiry@storagecorebiz.xyz. See also my Terms of Use.