Privacy policy

Murblabs is a software, design, AI and marketing studio run by Brian Mutuku in Nairobi, Kenya (“Murblabs”, “we”, “us”). We are the data controller for the personal data described in this policy, which explains how we handle it under the Data Protection Act, 2019 of Kenya.

Questions about this policy? Email info@murblabs.tech or WhatsApp +254 721 881 858.

Information you give us. When you build a project brief, message us on WhatsApp, email us or book a call, we receive what you choose to share, such as:

• Your name and business name
• Your phone number, email address or WhatsApp profile
• Project details: the services you need, budget range, timeline and anything else you tell us
• If you become a client: billing details, your KRA PIN where needed for invoicing, and the project materials you send us

Information collected automatically. Like most websites, the servers that host this site record basic technical data when you visit, such as your IP address, browser type and the pages requested. We use it only to keep the site secure and working. We do not currently use analytics, advertising or tracking tools.

We use personal data only for these purposes, each with a lawful basis under the Act:

• To reply to your enquiry and prepare a proposal or quote (at your request, before a contract)
• To deliver projects, send invoices and receipts, and support you after launch (to perform our contract with you)
• To keep the accounting and tax records Kenyan law requires (legal obligation)
• To keep the website secure and fix problems (our legitimate interests)
• To send you updates or marketing, only if you have agreed; you can opt out at any time (consent)

We do not sell or rent your personal data, and we do not use it to make automated decisions about you.

We share personal data only with service providers that help us run Murblabs, and only as much as they need:

• WhatsApp (Meta), when you message us or send a brief, which opens WhatsApp with your details filled in
• Cal.com, if you book a call
• Our email provider, when you email us
• Our website host, which keeps technical logs
• Fontshare (Indian Type Foundry), which serves the typeface on this site; your browser connects to it to load the font
• Payment providers such as Safaricom (M-Pesa), banks or card processors, when you pay an invoice
• Professional advisers and authorities, such as our accountant or the Kenya Revenue Authority, where the law requires it

Each of these providers has its own privacy policy for the data it handles.

Some of the providers above store data on servers outside Kenya. When we use them, we rely on the safeguards the Data Protection Act allows, such as the provider’s own security and data protection commitments, and we only transfer what the purpose needs.

• Enquiries that don’t lead to a project: up to 24 months, then deleted
• Client, contract and financial records: at least five years, as Kenyan tax law requires
• Technical logs: kept by our host for a short period for security

When we no longer need data, we delete or anonymise it.

We protect your data with encrypted connections (HTTPS), two-factor authentication on our accounts and access limited to people who need it. No system is perfectly secure, but we take reasonable steps, and if a breach affects you we will tell you and the Data Commissioner as the law requires.

Under the Data Protection Act, 2019 you have the right to:

• Be informed about how your data is used
• Access the personal data we hold about you
• Correct data that is inaccurate or incomplete
• Ask us to delete your data, where we don’t need to keep it by law
• Object to or restrict certain uses, including direct marketing
• Receive your data in a portable format
• Withdraw your consent at any time, where we rely on it

To use any of these rights, contact us at info@murblabs.tech. We may ask you to confirm your identity first, and we will respond within the time the law requires.

This site does not use cookies, and it does not store anything in your browser to track you.

If we add analytics in future, we will update this policy and ask for your consent where required.

This site and our services are for businesses and adults. We do not knowingly collect personal data from anyone under 18.

We may update this policy as our services change. The date at the top shows the current version, and significant changes will be highlighted on this page.

If you have a concern about how we handle your data, please contact us first at info@murblabs.tech so we can put it right.

You also have the right to complain to the Office of the Data Protection Commissioner in Kenya.