This Cookies Policy (“Policy”) explains how Upeo Africa Technologies Ltd (“Upeo Africa”, the “Company”, “we”, “us” or “our”), a limited liability company incorporated in the Republic of Kenya, uses cookies and similar technologies on https://www.upeoafricatechnologies.co.ke. It is issued together with our Privacy Policy and should be read with it. It is prepared with regard to the Data Protection Act, No. 24 of 2019 (the “Act”) and, where applicable, Regulation (EU) 2016/679 (the “GDPR”) and the ePrivacy rules that sit alongside it.
1. Interpretation and definitions
1.1 In this Policy, unless the context otherwise requires:
- “Cookie” means a small text file that a website places on your device through your browser. It can remember a choice, keep a visit together, or recognise that the same browser has returned.
- “Similar technologies” means local storage, session storage, pixels, and tags that store or read information on your device without using a cookie file.
- “Essential” means a cookie or store that is required for something you asked the site to do, such as sending a form or keeping a checkout in progress.
- “First-party” means set by this website. “Third-party” means set by a measurement or advertising service named in this Policy, such as Google, Microsoft, or Meta.
1.2 Headings are for convenience only. Words in the singular include the plural and the reverse.
2. Who this policy is from
2.1 The controller of personal data collected through these technologies is Upeo Africa Technologies Ltd, of 88225 Moi Avenue, Mombasa 80100, Kenya.
2.2 Questions about this Policy may be sent to hello@upeoafricatechnologies.co.ke.
3. Scope
3.1 This Policy covers https://www.upeoafricatechnologies.co.ke. It does not govern cookies on other sites we link to, including a card or mobile-money page hosted by a payment provider. Those sites set their own cookies under their own policies.
3.2 Where we build or host a product for a client, cookies on that product are the client’s responsibility unless a written agreement says otherwise.
4. What these technologies do
4.1 A cookie is stored by your browser and can be read again on a later visit. Storage that stays only in the browser is used for the same kinds of jobs, such as remembering a cart, without being sent on every request.
4.2 We use them to complete a form or a purchase you started, to protect forms from automated abuse, to understand how the public site is used, and, where we have enabled advertising measurement, to see which visits lead to an enquiry, a booking, or a purchase.
4.3 We do not sell personal data collected this way. We do not use these technologies to make a decision about you, by automated means alone, that has a legal or similarly significant effect.
5. Categories
5.1 We group what we use into four categories:
- Essential. Required for security or for a step you started. The site does not ask again before these, because that step cannot finish without them.
- Functional. Remembers something you did in this browser, such as the products in a cart, so the next step still works.
- Analytics. Records how the public pages are used, including session recordings, so we can see where a page is hard to follow.
- Advertising measurement. Used only when we switch on Google Ads or a Meta pixel. These cookies connect a visit with a later enquiry, booking, or purchase.
6. What runs on the public site
6.1 The table names the technologies a visitor can meet on the public site, why they exist, and how long they usually last. A provider may refresh an entry when you return, which starts that period again.
| Technology | Category | Purpose | How long it lasts |
|---|---|---|---|
| Site cookies and browser storage set by us | Essential and functional | Completes a form, holds a checkout that you started, and remembers products you placed in the cart on this browser. A short-lived security check confirms that a form was sent by a person. | For the visit, or until you clear the cart or your browser data |
| Microsoft Clarity | Analytics | Records pages, clicks, and scrolls on the public site, and can replay a visit so we can see where the page is unclear. Typical cookies include _clck, _clsk, and CLID. | Session cookies for about a day. Recognition cookies for about 12 months |
| Google Analytics | Analytics | Counts visits and pages when we enable it. It is not loaded twice if the same property already runs through Tag Manager. Typical cookies begin with _ga. | Up to 2 years |
| Google Tag Manager | Analytics | Loads the measurement tags we choose to publish. Any further cookie is then covered by this Policy. | As set by the tags that are published |
| Google Ads | Advertising | Measures whether a later enquiry, booking, or purchase followed an ad click, when we enable it. A typical cookie is _gcl_au. | About 90 days |
| Meta | Advertising | Measures visits and outcomes for a Meta pixel, when we enable it. Typical cookies are _fbp and, after an ad click, _fbc. | About 90 days |
6.2 Microsoft may also set a cookie named MUID when Clarity loads. It recognises the browser across Microsoft properties. Microsoft publishes that lifetime as about 12 months.
6.3 Google Analytics, Tag Manager, Google Ads, and Meta stay off until we enable them. Clarity runs on the public pages. The cart and the form check run when you use those features.
7. Essential and functional use
7.1 Essential use is limited to finishing a request you made and keeping forms from being submitted by automated scripts. It is not used to build an advertising profile.
7.2 If you block every cookie, a form may refuse to send until the security check can run, and a checkout may forget the products you had selected.
7.3 The cart stays in this browser until you remove those products, complete the order, or clear site data. It holds the product and the price you selected. It does not hold a card number.
8. Analytics
8.1 Clarity records how the public pages are used, including device type and a replay of a session. We use that to improve the site. We do not use a recording to name you unless you have already given us your name in a form during that visit.
8.2 When Google Analytics is enabled, it counts visits, pages, and the country-level area of a browser. When Tag Manager is enabled, it loads the tags we have chosen. Those tags do not run unless we publish them.
9. Advertising measurement
9.1 Google Ads and Meta cookies are set only when we enable those tools. Until then, they are not placed.
9.2 A confirmation page can tell an enabled measurement tool, once in that browser tab, that the visit ended in an enquiry, a subscription, a booking, a purchase, or a download. That notice does not include a card number.
9.3 Google AdSense may show advertisements on product pages, blog pages, event pages, and the legal pages. It does not run on the homepage or on service pages. When an advertisement loads, Google may set advertising cookies, including cookies served from googlesyndication.com. Those cookies are not set on pages where advertisements are not shown.
10. Providers outside this website
10.1 Google, Microsoft, and Meta process technical data under their own terms when their tools run. Some of them store that data outside Kenya. Transfers of personal data outside Kenya are made as described in the Privacy Policy.
11. Lawful basis
11.1 Essential cookies and storage are used because they are necessary for a step you asked for, or to keep a form from being abused. That is a legitimate interest, and for a checkout it is also a step toward a contract.
11.2 Analytics and advertising cookies are used for our legitimate interests in understanding the site and in measuring whether a campaign led to an enquiry or a sale, where those interests are not overridden by your rights. Where the GDPR requires consent before a non-essential cookie, you may refuse it under clause 12, and we treat a browser-level refusal as an objection to that processing.
12. How to refuse or delete cookies
12.1 You can delete cookies and site data already stored, and you can set your browser to block some or all cookies. The control sits in the browser’s privacy or site settings. Blocking every cookie also blocks the cookies a form or a checkout needs, so those steps may fail.
12.2 The main browsers publish their own steps:
- Google Chrome: Settings, Privacy and security, Third-party cookies.
- Mozilla Firefox: Settings, Privacy and Security, Cookies and Site Data.
- Apple Safari: Settings, Privacy, Manage Website Data.
- Microsoft Edge: Settings, Cookies and site permissions.
12.3 You can also opt out of particular providers:
- Google Analytics and Google Ads: the Google Analytics opt-out and Google ad settings.
- Microsoft Clarity: block cookies from clarity.ms in your browser, or use Microsoft privacy settings.
- Meta: Meta ad preferences.
12.4 A private or incognito window drops session cookies and session storage when you close it. Some stored data can remain, depending on the browser.
12.5 Signals such as Global Privacy Control or “Do Not Track” are not honoured in a uniform way by every provider named here. The reliable control is the browser setting or the provider opt-out above.
13. Retention
13.1 A cookie expires at the end of the period in clause 6, or sooner if you delete it. Records of a visit that we keep on our side are held only as long as the Privacy Policy allows, and are then deleted or aggregated.
14. Children
14.1 The website is not directed at children under eighteen (18). We do not knowingly use cookies to profile children.
15. Changes to this Policy
15.1 We will update this Policy when we add or remove a technology named here. The new text applies from the date it is published, and the “Last updated” date will change. A material addition, such as showing advertisements on the site, will be described in this Policy before it takes effect.
16. Governing law
16.1 This Policy is governed by the laws of the Republic of Kenya, without reducing any additional rights you have under the GDPR where it applies.
17. Contact
Questions about cookies may be sent to Upeo Africa Technologies Ltd, 88225 Moi Avenue, Mombasa 80100, or by email to hello@upeoafricatechnologies.co.ke. You may also read the Privacy Policy and the Terms of Service.