Legal
Privacy notice
What this website collects, why, how long we keep it, and how to ask us to delete it.
Last updated 19 September 2026.
Who we are
CASA NEXUS LIMITED ("CASA NEXUS", "we") is a company registered in Kenya, with offices at Pioneer, Kimathi Street, Floor 3, Suite 3, Nairobi CBD. We are the data controller for personal data collected through this website. For any question about this notice, or to exercise a right described below, write to info@casanexus.net.
What we collect
This site collects personal data in one place only: the enquiry form on the contact page. When you submit it, we receive the name, organisation, email address, telephone number, enquiry type and message you provide, together with the consent tick and the time of submission.
We do not run advertising or analytics tracking on this site, and we do not set cookies for marketing or measurement. Nothing on this site profiles you or builds an advertising audience.
Why we process it, and on what basis
We use enquiry details to reply to you and, where a conversation leads to work, to negotiate and manage that engagement. The lawful basis is your consent for the initial enquiry, and thereafter our legitimate interest in corresponding with a prospective or actual client, or the performance of a contract with you. We do not add enquiry addresses to a marketing list.
Who processes it for us
The site is hosted by Netlify, which also operates the form handling and spam filtering behind the enquiry form, and which records standard server request data such as IP address, user agent and requested URL for security and delivery purposes. Web fonts on this site are served by Google Fonts, which means your browser makes a request to a Google domain and Google receives the IP address of that request. Email correspondence is handled through our own business email provider.
These providers process data on our instructions. Some of them operate infrastructure outside Kenya, so an enquiry may be transmitted and stored outside the country. We rely on the providers' contractual data protection terms for those transfers.
How long we keep it
Enquiries that do not lead to work are deleted within 24 months. Where an enquiry becomes an engagement, the correspondence is retained for the life of the engagement and for seven years afterwards, which is the period we keep client records for tax, audit and professional liability purposes.
Your rights
Under the Kenya Data Protection Act, 2019, you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to our processing of it, or withdraw a consent you previously gave. If you are in the United Kingdom or the European Economic Area, the equivalent rights under the UK GDPR and the EU GDPR apply to the same effect.
Write to info@casanexus.net and we will respond within 30 days. If you are not satisfied with our response you may complain to the Office of the Data Protection Commissioner in Kenya, or to your local supervisory authority.
Research and evaluation data
This notice covers the website only. Personal data collected during an evaluation or research study is governed by the ethics protocol, informed consent process and data management plan agreed for that study, and by our agreement with the commissioning organisation. Study data is never published in a form that identifies a participant without their specific, recorded consent.
Changes to this notice
If we change what we collect or how we use it, we will update this page and change the date at the top. Material changes affecting existing enquiries will be notified by email where we hold an address for you.