Privacy Policy

Last Updated: March 15, 2025

1. Who We Are & Controller Details

Atriuma, operating at atriuma.digital, is dedicated to protecting visitor privacy. We act as data controller in accordance with the Kenya Data Protection Act, 2019. If you have any inquiries regarding data protection protocols, connect with our supervisor at [email protected].

2. Scope

This Privacy Policy outlines data capture pipelines applicable to visitors exploring atriuma.digital, interactive project submission forms, and linked visual communications handled by our team.

3. Data Categories Gathered

We process data across these specific channels:

Form Submissions: Client name, email addresses, phone contacts, brief outlines context.
Automatic Logs: IP address details, browser types, visitor duration, operational pages explored.
Analytics Files: Cookie preference updates managed with Google Consent Mode v2.

4. Objectives & Legal Grounds

Below is a breakdown of data utilization, mapped to legal justifications established under Part IV of Kenya's Data Protection rules:

Reason / Objective	Processed Category	Legal Justification
Processing corporate scripts & proposals	Contact details, Brief context	Executing prospective contract tasks
Operational security, error checks	IP logs, Browser data	Our legitimate interest in security
Measuring site visitor metrics	Analytics cookie files	Granted consent from Cookie Banner

5. Consent Mode v2 & Advertising Control

We deploy Google Consent Mode v2 advanced integrations. No analytical or advertising tracking occurs until you choose parameters in our Cookie Banner. At any time, you can re-adjust inputs using the "Cookie Settings" button present in our global footer.

6. Sharing of Your Information

Atriuma does not sell, barter, or distribute your private client parameters to third parties for commercial gain. We only share diagnostic metrics with analytical platforms (Google Analytics) under secure protocols and explicitly when consent is declared.

7. Storage Timescales

Prospect briefing details are stored securely for up to 24 months after last contact, to help facilitate potential creative treatments and contract references. Security logs are rotated every 90 days.

8. Your Statutory Rights

According to the Office of the Data Protection Commissioner (ODPC) in Kenya, you have the right to request deletion of your data, update inaccurate information, object to automated profiling, or extract digital copies of your communications. To enact these rights, contact us at [email protected].

9. Minors' Privacy

We do not purposefully collect data from individuals under 18 years of age. If you believe your ward has supplied us with information, notify us to remove those items.