Privacy Policy

This statement will be regularly updated to reflect any changes in the way we process your personal data or any changes in applicable law. This page tells you everything you need to know about how Novel Cloud Ltd (“NCL”; “we”) protects the personal data we process, as well as the rights you have with regard to such processing.

Personal Data & Legal Framework

NCL is committed to ensuring the highest level of protection of your personal data in accordance with the applicable legal frameworks. Operating out of Nairobi, Kenya, our primary regulatory framework is the Data Protection Act (DPA) 2019 of Kenya, overseen by the Office of the Data Protection Commissioner (ODPC).

Furthermore, as a provider of global cloud services, we ensure our processing activities comply with the principles of the General Data Protection Regulation (GDPR) 2016/679 where applicable to European citizens.

Our Data Protection Policy

NCL implements an internal policy relating to the protection of personal data that incorporates the core principles resulting from the DPA 2019 and GDPR:

• Explicit and legitimate purpose of processing activities.
• Relevance, minimization, and proportionality of the data collected.
• Transparency in informing you of processing concerning you.
• Strictly limited data retention periods.
• Uncompromising data security and confidentiality.
• Respect for the rights of data subjects.
• Ensuring compliance through the accountability principle.

Purpose for Processing

The personal data you provide us with is processed for marketing, operational, and commercial prospection purposes by NCL acting as the Data Controller. Your data is used to invite you to events, send you publications, or offer you efficient and relevant enterprise IT services.

We base the processing of your personal data on your prior consent, to the extent such consent is mandatory under the DPA 2019. When you check an “I agree” box on our forms, doing so will be considered as providing your consent. You have the possibility to withdraw your consent at any time.

When consent is not legally required, the legal basis of processing will be our legitimate interest in meeting your commercial needs and developing our brand, without prejudice to your rights and freedoms.

Data Collection & Retention

The information we process can be collected directly from you (e.g., via contact forms, event participation) or indirectly via trusted partners or public professional networks (e.g., LinkedIn). We only collect information that allows us to create, maintain, or develop business relationships.

Your personal data is subject to a limited retention period. As a matter of principle, it is kept for the duration of the business relationship established between you and NCL, and subsequently archived in line with ODPC guidelines and legal limitation periods in Kenya.

Access & Security

Your data is accessible only to authorized NCL marketing, sales, and technical teams. When a processor intervenes on our behalf (such as a marketing automation tool hosted on Microsoft Azure), we ensure that data transfers are limited to what is necessary and are carried out with appropriate guarantees for data protection. Your data is never sold to any third party.

Your Rights

Under the DPA 2019, you have the right to be informed, the right to access, the right to correction, and the right to deletion (erasure) of your personal data. You can also object to the processing of your data for marketing purposes.

To exercise these rights, please send an email to legal@novelcloud.systems, or send a letter to our Data Protection Officer at:

Your request will be answered without undue delay. If you consider that our processing activities infringe your rights, you have the ability to file a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

Cookie Usage Policy

Cookies are text files containing small amounts of information which are downloaded to your device when you visit our website. Cookies aim at facilitating your navigation and giving you greater web services.

We use Strictly Necessary Cookies (required for site functionality and security) which do not require prior consent. For Performance Cookies, Targeting Cookies, and Third Party Cookies (e.g., LinkedIn, YouTube integrations), you may adjust your browser preferences to accept or refuse them. Refusing certain cookies may degrade your experience on our site.