Interim document — effective 18 May 2026. This Privacy Policy is an interim version prepared ahead of a full legal review. A comprehensive, legally reviewed policy will replace this document. By using our website or services you acknowledge this interim nature.
1. Who We Are
Right Resource Africa ("we", "our", "us") is a company incorporated in Kenya with its registered office at 4th Floor, Woodvale Place, Woodvale Groove, Westlands, Nairobi, Kenya. We are the data controller for personal data collected through this website and in the course of our service delivery.
2. Data We Collect
We may collect the following categories of personal data:
2.1 Data you provide to us
- Contact form submissions: name, email address, phone number, and message content
- Candidate applications: full name, date of birth, nationality, contact details, employment history, educational qualifications, and copies of identity documents
- Business advisory enquiries: company name, contact details, and nature of inquiry
2.2 Data collected automatically
- Website analytics: page views, session duration, referrer URL, browser type, and approximate geographic location via Cloudflare Web Analytics (privacy-first, no cookies, no cross-site tracking)
- Server logs: IP address and request metadata retained by Cloudflare in the ordinary course of hosting
3. How We Use Your Data
We use your personal data to:
- Respond to your inquiries and communicate with you about our services
- Process candidate applications and match candidates with suitable employers
- Deliver skills training, language, and cultural integration programmes
- Fulfil our obligations under service agreements with candidates and employers
- Comply with legal and regulatory requirements including NEA licensing obligations
- Improve our website and services using aggregated, anonymised analytics
4. Legal Basis for Processing
We process your personal data on the following legal bases under the Kenya Data Protection Act, 2019:
- Contract: where processing is necessary to perform a service you have requested or engaged us for
- Legitimate interests: where we have a legitimate business reason and it does not override your rights
- Legal obligation: where we are required by law to process data (e.g., NEA records, tax obligations)
- Consent: where you have given clear consent for a specific purpose (e.g., marketing communications)
5. Sharing Your Data
We do not sell your personal data. We may share your data with:
- Verified international employers — for the purpose of matching and placing candidates, with your knowledge and consent
- Government authorities — where required by law (e.g., NEA, immigration authorities in destination countries)
- Service providers — including our email and hosting providers, solely to operate our business systems
- Professional advisers — lawyers and accountants where necessary and subject to confidentiality obligations
Any international transfer of personal data to employers in the Gulf or Europe is made subject to appropriate safeguards consistent with the bilateral labour agreements in place.
6. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy. Candidate records are typically retained for seven years after the end of an engagement for compliance purposes. Website contact form submissions are retained for up to two years. You may request deletion of your data at any time (subject to legal retention obligations).
7. Your Rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal obligations)
- Object to or restrict certain types of processing
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)
To exercise any of these rights, contact us at info@rightresource.africa.
8. Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. Our website is served via Cloudflare with HTTPS enforced. Access to candidate records is restricted to authorised staff only.
9. Cookies
Our website uses minimal cookies. See our Cookie Policy for details.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with the effective date. We will notify you of material changes where we have a way to contact you directly.
11. Contact
For any data protection queries, contact us at info@rightresource.africa or write to us at our Nairobi office address.
Last updated: 18 May 2026 — Interim version. Final version pending legal review.