SECTION 01
Information you share
When you submit an enquiry, we collect the contact details and project information shown in that form, such as your name, email, phone, organisation and message. Fields marked required are needed to handle that request; optional fields can be left blank.
Newsletter forms collect an email address and consent information. Tool email forms collect your email, optional name and the requested resource. A result summary may be included in the requested email, but is not saved in our tool lead record. Do not submit passwords, payment-card details or sensitive personal records through a general enquiry form.
SECTION 02
Why we use information
We use enquiry information to respond, discuss a project and provide requested services. Depending on the interaction, the basis is taking steps you request before a contract, performing a contract, or our legitimate interest in responding and operating a secure service.
Optional analytics and marketing messages rely on consent. We keep consent evidence and necessary security records to demonstrate choices, prevent abuse and meet applicable obligations. We do not use an enquiry as automatic permission for unrelated marketing.
SECTION 03
Consent and changing your mind
You can reject optional analytics without losing access to articles, calculators or enquiry forms. Cookie settings in the footer lets you change that choice later. Accepting website cookies is separate from agreeing to receive marketing emails.
Newsletter subscriptions require confirmation and include an unsubscribe route. Withdrawing consent stops future processing that relies on that consent; it does not change whether earlier processing was lawful or remove records we still need for an agreed service or legal obligation.
SECTION 04
Cookies and local storage
Essential storage remembers your cookie choice, maintains a browser-session reference for that choice, and supports security and requested features. Admin authentication uses separate sign-in cookies. Theme, language caching and NENO progress may use browser storage to provide features you select.
Google Analytics, when configured, is blocked until you enable Analytics in Cookie settings. We do not currently load advertising pixels or embedded media trackers. Analytics cookies can include _ga and _ga_* identifiers. Rejecting or withdrawing analytics disables it and clears accessible analytics cookies. Your browser may separately block or remove storage.
SECTION 05
Who receives information
Access is limited to people and service providers who need it to handle your request or run the sites. Depending on the feature, providers may include hosting, database, email delivery, security and Google Analytics services. We do not sell enquiry records.
A project-estimator follow-up sends the request to our team inbox as well as a confirmation to you. Other tool emails deliver the requested summary or resource. Opening external services such as WhatsApp or an independently hosted reference takes you to that provider’s own privacy practices.
SECTION 06
Processing across borders
Our teams operate in Kenya and Malawi. Hosting, email and optional analytics services may process information in other countries, depending on the configured provider and service.
Where a transfer requires safeguards under applicable law, we must use an appropriate lawful arrangement. This page does not claim that every destination has identical laws. Contact us before sending information subject to particular residency or transfer requirements.
SECTION 07
Keeping information secure
We use access controls, validated forms, restricted admin access and encrypted transport where supported. We limit information included in routine logs and use consent and retention fields on collected records.
No online service can promise absolute security. Use the intended forms, avoid sharing unnecessary sensitive details and tell us promptly if you believe a submission or account has been misused.
SECTION 08
How long records are kept
Our standard record-expiry periods are two years for contact enquiries, tool leads and resource-download records, and three years for newsletter records. Records are removed by the retention process when their period expires. A service relationship or applicable obligation may require a different documented period.
Cookie choices last up to six months on this website. Consent/session evidence has a six-month expiry and is removed by the retention process. It contains category choices, version, time and a hashed session reference—not your email, browsing history or raw IP address. Completed privacy-request records are generally kept for 90 days and operational audit records for one year.
SECTION 09
Access, correction and deletion
You can ask what information we hold about you, request corrections, object to certain uses or request deletion or a copy, subject to applicable law and any information we must retain. We may need to verify your identity to avoid disclosing someone else’s information.
Use the Contact page and identify the email address or project connected with your request. Do not send identity documents unless we explain why they are needed and provide a suitable route. If you are unhappy with our handling, you can contact the relevant data-protection authority, including Kenya’s Office of the Data Protection Commissioner where applicable.
Read the ODPC’s guidance on your rights ↗SECTION 10
Children and learning content
These business websites and enquiry services are intended for adults arranging services. We do not ask children to create accounts or submit personal information through the public tools.
If a commissioned learning project involves children’s information, the customer and Brookside must agree the roles, permissions and safeguards for that project separately. If a child has submitted information here, ask us to review and remove it where appropriate.
SECTION 11
Updates to this notice
We update this notice when website features or information practices change. The version date shows the current text. A material change to optional cookie purposes will require a fresh choice rather than reusing an old permission.
This notice describes the public websites. A project agreement or a specific collection notice may provide additional details for a particular engagement, without removing applicable privacy rights.
SECTION 12
Contact Brookside
For privacy questions, use our Contact page and include “Privacy request” in the message. This routes your question to the team without claiming that we have a separate statutory DPO office.
Nairobi, Kenya: +254 701 537 798 / +254 102 221 200. Lilongwe, Malawi: Area 49/1/976, +265 999 911 556 / +265 995 448 339. Include enough context to find your record, but avoid sending sensitive documents in an initial enquiry.
Tell us which section you’re asking about so we can give you a useful response.
Write to Brookside ↗