Privacy

01Who is responsible

Jose Mbugua, Nairobi, Kenya. I work on my own, as a freelancer under my own name. Contact: josekingp23@gmail.com.

02This website

I don't collect anything through this site. It sets no cookies, runs no analytics or tracking, and has no forms. Cloudflare, which hosts it, processes basic request data such as IP addresses to deliver and protect it. I don't use that data to identify visitors.

03Emails

Your emails stay in my Gmail, run by Google, so I can answer you and set up your order. I never use our emails, or anything from your files, to build a list for anyone.

If I emailed you first, I found your work email address on your company's website or a public directory. Reply "stop" and I won't write again.

I also note public posts where a seller describes a problem my check could help with, for example on Amazon's seller forums or job boards. I keep the post link, the name or handle shown and a short note. An AI tool helps me find these posts and public work addresses.

04Files you send

Your four Amazon reports and unit costs show SKUs, shipments, reimbursements and costs. Some rows may show an Amazon order number, but not your customers' names or addresses. Please don't send customer details. If they arrive by mistake, I delete them and ask you for a clean copy.

For step 2, you also send the contents of the shortlisted shipments, and any invoices you choose to send.

You don't have to send anything, but without these files I can't do the check.

I use them only for your order. I never use them for another client, or in a sample or post without your written OK, which you can withdraw at any time.

If you order a lead list and send me contacts to leave out, I use them only to remove matches from your list.

05Legal basis

I use your files and emails to deliver the service you asked for, as set out in the Terms or your quote, or to set it up. I keep invoices because Kenyan tax law requires it, and because keeping proper accounts is my legitimate interest.

I also have a legitimate interest in keeping this site safe and in running and growing my services. That covers Cloudflare's request data, my other business records, my notes on public posts, and my emails to businesses that may want my services. Contacts a client asks me to leave out of a list rest on our shared legitimate interest in not contacting those people.

06Who has access

Only I work on your files. Google stores them for me in Gmail and Google Drive, and I keep a working copy on my own laptop. If you share a Google Drive or Dropbox folder from your own account, it stays in your account. I download a working copy and delete it on the schedule below. Wise or PayPal handle your payment. If a partner referred you, I tell them only that you ordered. I share information with authorities only if the law requires it.

On Fiverr or Upwork orders, that platform also keeps your messages and files under its own privacy policy, and I can't delete them there.

I don't upload your files to AI tools.

07How long I keep things

• Your reports, costs and any step 2 files, and the emails they came in: deleted 30 days after I deliver your report or claims, including from my trash folders, or sooner if you ask. If I never deliver, for example because the order stops, I delete them 30 days after we last wrote.
• Contacts you send me to leave out of a lead list: deleted 30 days after I deliver your list. If I never deliver it, I delete them 30 days after we last wrote.
• Our other emails and my copy of your PDF report: deleted 12 months after we last wrote.
• If I emailed you first and we never worked together: your name, the work contact details I found and where I found them, deleted 12 months after my last email. If you reply "stop", I keep only your email address, so I don't write to it again.
• My notes on public posts: deleted 12 months after I make them.
• Invoices: kept 5 years, as Kenyan tax law requires.

08Where your data goes

I work from Kenya, so your files come to me there. Kenya's Data Protection Act 2019 applies, and UK or EU law may apply too. The UK and EU have not formally rated Kenya's law as equal to theirs. Cloudflare, Google, Wise, PayPal, Fiverr, Upwork and the AI tool I use for research may store or process data outside Kenya, including in the US. Each one explains its safeguards in its own privacy policy, and I can send you the links. I keep the promises on this page wherever you are.

09Your rights

You can ask me to show, correct, delete, restrict or move the personal data I hold about you, or object to how I use it. Email me and I deal with your request within 7 days. I make no automated decisions about you.

If you are unhappy, please tell me first. You can also complain to the UK ICO, your national authority in the EU, Kenya's Office of the Data Protection Commissioner, or the data protection authority where you live.

10Security

Only I work on your files, and only in my own accounts. My Google account uses 2-step verification. I work only on my own password-protected laptop, which nobody else uses. I never ask for your Amazon login, and I ask you not to send customer details. I don't upload your files to AI tools, and I delete them on the schedule above. If something goes wrong with your files, I tell you without delay.

11Changes

If I change this page, I update the date at the top. If a change affects an order in progress, I email you.