Privacy Policy - Atoto & Atori

Atoto Atori
Website: atotoatori.co.ke
Effective Date: January 01, 2026
Last Updated: January 01, 2026

1. Introduction

Welcome to Atoto Atori (“we,” “our,” “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website atotoatori.co.ke and use our content creation and marketing services.

This Privacy Policy is designed to comply with the Kenya Data Protection Act, 2019, the Kenya Information and Communications Act, and other relevant Kenyan laws governing data protection, content creation, and digital marketing.

By accessing our website and using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our website or services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

Register for an account on our website
Subscribe to our newsletter or marketing communications
Request our content creation or marketing services
Fill out contact forms or inquiry forms
Participate in surveys, contests, or promotional activities
Communicate with us via email, phone, or social media

Personal information may include:

Full name
Email address
Phone number
Physical address
Company name and position
Identification documents (when required for contractual purposes)
Payment and billing information
Social media handles and profiles

2.2 Usage and Technical Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

IP address and geolocation data
Browser type and version
Operating system
Referring website URLs
Pages viewed and time spent on pages
Click-through data and navigation patterns
Device identifiers and mobile network information
Cookies and similar tracking technologies

2.3 Marketing and Communication Data

We collect information about your:

Marketing preferences and interests
Communication preferences (email, SMS, phone)
Engagement with our marketing campaigns
Responses to surveys and feedback forms
Interaction with our content across platforms

2.4 Content and Creative Data

For our content creation services, we may collect:

Creative briefs and project specifications
Brand guidelines and assets
Content drafts and revisions
Feedback and approval communications
Intellectual property and proprietary information

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

To provide, maintain, and improve our content creation and marketing services
To process your requests and fulfill contractual obligations
To communicate with you about projects, deliverables, and timelines
To provide customer support and respond to inquiries

3.2 Marketing and Communications

To send you newsletters, promotional materials, and marketing communications (with your consent)
To inform you about our services, special offers, and updates
To conduct market research and analyze customer preferences
To personalize your experience and tailor content to your interests

3.3 Business Operations

To process payments and maintain financial records
To detect, prevent, and address fraud or security issues
To comply with legal obligations and regulatory requirements
To enforce our terms and conditions
To protect our rights, property, and safety, and that of our users

3.4 Analytics and Improvement

To analyze website usage and user behavior
To improve our website functionality and user experience
To develop new services and features
To measure the effectiveness of our marketing campaigns

4. Legal Basis for Processing (Kenya Data Protection Act, 2019)

Under the Kenya Data Protection Act, 2019, we process your personal data based on the following legal grounds:

Consent: When you have given explicit consent for specific processing activities
Contractual Necessity: When processing is necessary to fulfill our contractual obligations to you
Legal Obligation: When we must process data to comply with Kenyan laws and regulations
Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms

5. Data Sharing and Disclosure

We respect your privacy and do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers and Partners

We may share your information with trusted third-party service providers who assist us in:

Website hosting and maintenance
Payment processing and financial services
Email marketing and communication platforms
Analytics and data analysis tools
Cloud storage and data management
Content delivery networks

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information when required by law, including:

Compliance with court orders, warrants, or legal processes
Response to requests from Kenyan government authorities or regulatory bodies
Protection of our legal rights and interests
Prevention of fraud, security threats, or illegal activities
Protection of the safety and rights of our users and the public

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the relevant third parties, subject to the same privacy protections outlined in this policy.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit permission to do so.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Secure servers and firewalls
Access controls and authentication mechanisms
Regular security audits and vulnerability assessments
Employee training on data protection and confidentiality
Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by Kenyan law.

Retention periods vary depending on:

The nature of the information collected
The purposes for which it is processed
Legal, regulatory, or contractual requirements
Our legitimate business needs

When your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

8. Your Rights Under Kenyan Law

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request access to the personal information we hold about you and receive a copy of that information.

8.2 Right to Rectification

You have the right to request correction of inaccurate, incomplete, or outdated personal information.

8.3 Right to Erasure

You have the right to request deletion of your personal information under certain circumstances, subject to legal and contractual obligations.

8.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain situations.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.

8.6 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes or based on our legitimate interests.

8.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in Section 13.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website performance. Cookies are small text files stored on your device that help us:

Remember your preferences and settings
Understand how you use our website
Improve website functionality and user experience
Deliver targeted marketing and advertising

You can control and manage cookies through your browser settings. However, disabling cookies may affect the functionality of our website.

For more information about the specific cookies we use and how to manage them, please refer to our Cookie Policy.

10. Marketing Communications and Consent

We may send you marketing communications about our services, promotions, and updates if you have:

Opted in to receive such communications
Provided your contact information for this purpose
Previously engaged with our services

You can opt out of marketing communications at any time by:

Clicking the “unsubscribe” link in our emails
Updating your communication preferences in your account settings
Contacting us directly using the information in Section 13

Please note that even if you opt out of marketing communications, we may still send you transactional or service-related messages necessary for our business relationship.

In compliance with Kenyan marketing regulations, we ensure that all marketing communications:

Clearly identify Atoto Atori as the sender
Provide a clear and easy way to opt out
Respect your communication preferences
Comply with the Kenya Information and Communications Act

11. Children’s Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete such information promptly.

If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

While we primarily operate within Kenya, we may transfer your personal information to service providers located outside Kenya. When we do so, we ensure that:

Adequate safeguards are in place to protect your information
The transfer complies with the Kenya Data Protection Act, 2019
Contractual obligations require recipients to maintain equivalent protection standards

13. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Atoto Atori
Email: legal@atotoatori.co.ke
Phone: +254 7 0143 1696
Address: Kajiado, Kenya

Data Protection Officer:
Email: dpo@atotoatori.co.ke

14. Complaints and Dispute Resolution

If you believe your privacy rights have been violated or you are dissatisfied with how we have handled your personal information, you have the right to lodge a complaint with:

Office of the Data Protection Commissioner (ODPC)
Nairobi, Kenya
Website: www.odpc.go.ke
Email: complaints@odpc.go.ke

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on our website
Updating the “Last Updated” date at the top of this policy
Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Here’s a privacy and policy clause addressing content authenticity:

16. Content Authenticity and Classification

This website maintains two distinct content categories with different standards of factual accuracy:

16.1 Real-Life Content (atotoatori.co.ke/nnalolile)

All content published under atotoatori.co.ke/nnalolile is based on genuine, real-life experiences. While we may modify certain details to protect privacy (such as names, locations, or identifying characteristics), the core events, situations, and narratives presented in this section are truthful accounts of actual occurrences. We are committed to maintaining the integrity and authenticity of Nnalolile- where we look carefully, listen keenly and learn something new with you.

16.2 Fictional Content (atotoatori.co.ke/yvix)

All content published under atotoatori.co.ke/yvix is entirely fictional. Any resemblance to actual persons, living or dead, events, or locales is purely coincidental. This section is dedicated to creative storytelling, and readers should not interpret any content here as factual or based on real events.

16.3 User Responsibility

Users are responsible for noting which section of the website they are accessing. We clearly distinguish between these categories to ensure transparency and prevent confusion about the nature of the content being consumed.

17. Acceptance of This Policy

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of those changes.