Privacy Policy
Atlas is built to work without an account, so we collect very little. This page explains what we do collect, why, who sees it, and the rights you have.
1. Who is responsible
The data controller is Brandmark Systems Limited, Aya House, Kenyatta Street, 1st Floor, Room 5, Eldoret, Kenya. Registered with the Office of the Data Protection Commissioner (ODPC), registration number . Contact us at info@brandmarkenya.com. This policy is written with Kenya’s Data Protection Act, 2019 in mind.
2. What we collect
Things you tell us
When you use a form on Atlas, or message us on WhatsApp or email, we receive what you type: for example your name, email address, phone number, business name, the message, and details of any product, price or link you send. Please do not send ID numbers, card numbers or other sensitive details. We do not need them.
Things your browser stores on your device
Atlas remembers some of your choices, such as your currency, selected items and recent searches, in your browser’s local storage. This stays on your device. We do not receive it. See Cookies and local storage.
Technical data
Our hosting provider, like any web host, handles technical data when you visit, such as your IP address, browser type, pages requested and time, for security and to run the service. We do not use advertising trackers or sell personal data.
Atlas has no accounts or passwords, and we do not take payments. The estimator runs in your browser, so the product, weight and destination you try in the calculator are not sent to us.
3. Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Reply to your message, quote or request | Form details, contact details | Your request, and steps before a contract |
| Review listings and price reports you send | What you submitted | Our legitimate interest in accurate data |
| Respond to data requests and takedown notices | Your details and the request | Legal obligation |
| Keep Atlas secure and prevent spam or abuse | Technical data, form content | Our legitimate interest |
| Contact you about our own services, only if you ask | Name and contact details | Your consent, which you can withdraw |
We do not use your data to make automated decisions that significantly affect you.
4. Who we share it with
We share personal data only with providers who help us run Atlas, and only as needed:
- Cloudflare hosts the website and receives what you type into our forms.
- Resend sends what you type into our forms to our email inbox.
- Our email provider stores the messages we receive.
- Our code provider (GitHub) keeps the website files. Cloudflare, above, also processes technical data when you visit.
- Exchange-rate provider (ExchangeRate-API) supplies currency rates to our data refresh. Your visit does not send your personal data to them.
- WhatsApp (Meta) handles messages you choose to send us there, under its own terms.
We may also disclose data if the law or a court requires it, or to protect rights, safety or security. If our business is sold or reorganised, data may pass to the new owner under this policy. We do not sell personal data.
5. Sending data outside Kenya
Some of the providers above store or process data in other countries, including the United States and Europe. Where personal data leaves Kenya we rely on safeguards required by the Data Protection Act, such as contractual terms, appropriate protections at the provider, or your consent where needed.
6. How long we keep it
- Messages and form submissions: up to 24 months after our last contact, then deleted.
- Data request, complaint and takedown records: up to 6 years, to show we complied.
- Listing and price information you send: kept as part of our data, without your contact details being published.
- Technical logs at our providers: kept for the periods they set, usually a few weeks to a few months.
We may keep data longer where the law requires it or for a legal claim.
7. Your rights
Under the Data Protection Act, 2019, you may ask us to:
- tell you whether we hold your personal data and give you a copy;
- correct data that is wrong or incomplete;
- delete or restrict data we no longer need or have no right to hold;
- stop using your data for direct marketing, or object to other uses;
- withdraw consent you gave, without affecting what we did before;
- provide your data in a portable format, where that applies.
To use a right, send us a data request or email us. We may need to confirm who you are first. We aim to answer within 5 working days and in any case within the time the law allows. There is no charge unless a request is clearly unfounded or excessive.
8. Cookies and local storage
Atlas does not set advertising or analytics cookies. It uses your browser’s local storage only to remember your own choices, such as currency and selected items, so Atlas works the way you left it. You can clear this any time in your browser settings. Our hosting provider and the Google Fonts service used for typography may process technical data such as your IP address when your browser loads pages and fonts. If we add analytics or advertising in future, we will update this policy and ask for your consent where required.
9. Security
We use reasonable measures, including encrypted connections (HTTPS), restricted access to our inbox and code, and spam protection on forms. No online service is perfectly secure. If a breach is likely to harm you, we will tell you and the ODPC as the law requires. To report a security problem, see Legal notices.
10. Children
Atlas is not meant for people under 18, and we do not knowingly collect their data. If you think a child has sent us personal data, tell us and we will delete it.
11. Other websites
Atlas links to sellers and other sites. We do not control how they use data. Read their privacy policies.
12. Changes
We may update this policy. The “last updated” date above shows the latest version, and we will post a notice on Atlas for important changes.
13. Questions and complaints
Please contact us first at info@brandmarkenya.com or through the Contact page. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).