Privacy policy

EAdirectory is a business directory for Kenya. This page explains what personal data we hold, why we hold it, and how you can have it corrected or removed. We handle personal data in line with theKenya Data Protection Act, 2019.

Who we are

EAdirectory is a business directory operating in Nairobi, Kenya. For the purposes of the Kenya Data Protection Act, 2019, EAdirectory is the data controller for the personal data described on this page.

Contact: hello@eadirectory.com ·+254 709 384 200

Business listing information

EAdirectory publishes business information such as trading name, category, physical address, telephone number, email address and website. Where a business is run by an individual, some of this may be personal data under the Act.

Where listing information comes from:

• Direct submissions: the business owner submits their own details through our listing form.
• Publicly available business sources: including public business profiles, company websites and public directories, where a business has already published its contact details to the public in order to be contacted by customers.

Our lawful basis for publishing listings we compiled from public sources is our legitimate interest, and the legitimate interest of the public, in maintaining an accurate directory that helps customers find and contact Kenyan businesses. We publish only business contact information that the business itself has already made public for that purpose. We do not publish national ID numbers, dates of birth, financial details, or any special category personal data.

If you would prefer not to appear, you can have your listing removed at any time. We do not require a reason and there is no charge.

Remove or correct your listing

You can ask us to remove, correct or update a listing using any of the following:

• Phone: +254 709 384 200
• Email: hello@eadirectory.com
• Contact form: eadirectory.com/contact

Tell us the business name and the page address if you have it. So that we do not remove a listing at the request of a competitor, we may ask you to confirm you are connected to the business, for example by answering on the listed phone number or replying from the listed email address. This is a light check and we keep it simple.

We action removal requests within 7 days. Because our website is rebuilt and republished when changes are made, a removed listing may remain visible in search engine results or caches for a short period afterwards while those services update.

Our forms have an optional box, unticked unless you tick it, to hear about other WPfoss products. If you tick it, your email and name go to WPfoss's central mailing list (news.wpfoss.ke), which emails you a confirmation link. You only get news and offers after you confirm. Every email has an unsubscribe link, and leaving stops all WPfoss marketing.

What we collect from visitors

• Form submissions: name, email, phone, business details and your message when you contact us or submit a listing. Used to reply to you and to process your listing. If you tick the optional marketing box on the listing form, we may also email you occasional news and offers; you can unsubscribe at any time.
• IP address: recorded when you submit a form. We use it to prevent spam and abuse (rate limiting) and it is included in the notification we receive. It is not used to build a profile of you.
• Approximate location from your IP: Cloudflare provides a country code (for example KE) used for routing and regional content.
• Precise geolocation: only if you explicitly grant browser permission on the "Near me" feature. These coordinates stay in your browser and are never sent to our servers. You can revoke this at any time using Manage location preference in the footer.
• Click activity on listings and ads: we count taps on Call, WhatsApp, Website and Directions buttons, listing opens and ad clicks so we can tell business owners and advertisers how much interest they receive. We record which listing or ad was tapped, not who tapped it. See Cookies, Tracking and Activity Monitoring.

Cookies, Tracking and Activity Monitoring

We monitor how people use all of our websites (wpfoss.ke, wpfoss.com, partners.wpfoss.ke, rank.ke, every.ke, eadirectory.com, album.ke, album.africa, nipecode.ke, onduu.ke, ujiajiri.ke and insurepap.com). We do this to see what works, fix what does not, keep accounts safe and measure our marketing.

What we record: the pages opened, where visitors came from, the type of device, and actions taken, such as tapping Call or WhatsApp on a listing. EAdirectory has no visitor accounts, so there are no sign-ins to record.

Our own records. When you tap Call, WhatsApp, Website, Directions or open a listing, or click an advertisement, your browser sends a short message to our own server (/api/track). We add one to a running count for that listing or advertisement and note the time of the latest click (and, for ads, which slot on the page it was in). We do not store who clicked, and the count does not set a cookie. This counting runs whether or not you accept cookies, because it holds no personal data. The server also keeps a temporary counter against your IP address for five minutes, only to stop one source flooding the count; it then expires on its own.

Our websites also send page views and clicks to our own server at wpfoss.ke, so we can see in one place how people use all our sites. This sets no cookie and stores nothing in your browser. We recognise a returning visitor during one day by a scrambled code made from your IP address and browser, which changes every day; we never store your IP address. These records are deleted after 365 days.

Google Tag Manager always loads on our pages. It decides which tools may run, and it sets no cookies itself.

Tools that need your consent. These run only after you press Accept:

• Google Analytics: counts visits and shows us which pages and actions are used.
• Meta Pixel (Facebook): tells us which visits come from Facebook and Instagram, so we can measure our marketing there. If we advertise on those platforms in future, it may also be used to show our ads to people who have visited.
• Google AdSense: may be used to show advertising. Personalised ads run only after you press Accept.

Google and Meta process this data under their own policies and may process it outside Kenya.

Your choice. The banner at the bottom of the page lets you Accept or Reject. You can change your mind at any time with the "Cookie settings" link in the footer. If you choose Reject later, the tools stop working from then on, but cookies they already set stay in your browser until you clear them in your browser settings.

Who we share data with

We do not sell your personal data. We share data only with service providers who help us operate the site, and only to the extent needed:

• Cloudflare: website hosting, security and delivery.
• ZeptoMail: sending form notification emails.
• Google (Analytics, Tag Manager, AdSense) and Meta (Pixel): analytics, advertising and marketing measurement, only after you accept cookies.
• Slack: internal notifications when a form is submitted.

Storage, international transfer and retention

Our website and form data are hosted on Cloudflare, whose servers are located outside Kenya. Submitting a form therefore involves a transfer of personal data outside Kenya. We use established international providers who apply appropriate technical and organisational safeguards.

Retention: listings remain published until the business asks for removal or we withdraw them. Form submissions and email correspondence are kept for as long as needed to deal with your enquiry and for our business records. Spam-prevention records including IP addresses are kept for a short period only.

Your rights under the Data Protection Act, 2019

Under the Kenya Data Protection Act, 2019 you have the right to:

• Be informed about how your personal data is used, which is the purpose of this page.
• Access the personal data we hold about you.
• Correct data that is inaccurate, out of date or incomplete.
• Erasure: ask us to delete your personal data, including removing your listing.
• Object to our processing of your personal data.
• Restrict how we process your data in certain circumstances.
• Data portability: receive your data in a usable format where applicable.

To exercise any of these rights, contact hello@eadirectory.com or call +254 709 384 200. We respond within 7 days and these rights are free to exercise.

Complaints to the Office of the Data Protection Commissioner

We would prefer to resolve any concern with you directly, so please contact us first. However, you always have the right to complain to Kenya's data protection regulator, theOffice of the Data Protection Commissioner (ODPC):

• Website: www.odpc.go.ke
• Complaints email: complaint@odpc.go.ke

Complaining to the ODPC is free and does not affect any other legal remedy available to you.

Changes to this policy

If this policy changes we will update the effective date at the top of this page. Material changes will be notified on the homepage for at least 14 days.

Questions about this policy, or want a listing removed? Emailhello@eadirectory.com, call+254 709 384 200, or use the contact form.