Privacy policy

Hackhouse Africa("Hackhouse", "we", "us") runs the coworking space at 124 Manyani East Road, Nairobi, the programs described on this site, and this website. For the purposes of the DPA we are the data controller of the personal data described here.

Address: 124 Manyani East Road, Nairobi, Kenya. Our data protection contact is info@hackhouseafrica.com.

• Contact form data: your name, email address, phone number, and whatever you put in the form, such as a preferred tour date and time, your company or project, the kind of partnership you have in mind, or your message.
• Donation data: your name, email address, the amount and currency, and the payment reference. We do not see or store your card number or M-Pesa PIN; Paystack handles the payment.
• Team account data: the sign-in email, name, sessions and audit trail of Hackhouse staff who use the admin. There are no member or customer accounts on this site.
• Technical data: essential cookies for the admin sign-in, basic security logs, and anonymous page-view measurements (see Cookies and analytics below).

Applications to the Hackhouse Residency are made on the Residency site, which has its own privacy policy. Event space bookings and the community are on the community platform, which has its own too.

• To answer you: we use contact form data to book your tour, reply to your enquiry or follow up a partnership, on the basis of your request (steps at your request before a contract) and our legitimate interest in running the space.
• To process a donation: we use donation data to take the payment, send you a receipt and keep the financial record the law requires (performance of a contract and legal obligation).
• To keep the site secure: technical data and the admin audit trail, on the basis of our legitimate interest in protecting the site and the people who use it.

We do not use your data for marketing unless you ask us to, and we do not sell it.

Only with service providers ("data processors") that help us run the site, under agreements that require them to protect it:

• Supabase: database and authentication.
• Vercel: hosting, delivery and anonymous analytics.
• Paystack: donation payments by card and M-Pesa.
• Resend: the emails we send you, such as a tour confirmation or a donation receipt.
• Google Maps: the map on the coworking page loads from Google, which may set its own cookies.

Contact form submissions are read by the Hackhouse team only. We may disclose data where the law requires.

Our providers process data outside Kenya, including in the European Union and the United States. Where personal data leaves Kenya we rely on providers with recognised security and contractual data protection commitments, and we transfer only what the service needs.

Contact form submissions are kept while we deal with them and for a reasonable period afterwards, then deleted. Donation records are kept for as long as financial record keeping requires. You can ask us to delete your data sooner, subject to those legal duties.

Data is encrypted in transit, the database is closed to the public, the admin is limited to named staff with a password and an authenticator, and every admin action is logged. No system is perfectly secure. If a serious breach happens we will tell you and the Data Commissioner where the law requires.

Under the DPA you have the right to:

• Be informed of how your data is used (this policy);
• Access the personal data we hold about you;
• Correct data that is inaccurate or incomplete;
• Delete your data where there is no overriding reason to keep it;
• Object to or restrict certain processing;
• Receive a copy of your data in a portable format;
• Withdraw consent at any time, without affecting what was done before.

To exercise any of these, email info@hackhouseafrica.com. We answer within the time the DPA sets.

The public pages set no cookies of their own. The admin sign-in sets essential cookies to keep staff signed in. We measure page views with Vercel Analytics, which does not use cookies and does not identify you. The Google map on the coworking page may set Google's cookies when it loads.

The site and the space are for adults. We do not knowingly collect data from children. If you believe a minor has sent us data, write to us and we will remove it.

We may update this policy. When a change matters, we update the date at the top.

Questions: email info@hackhouseafrica.com or write to us at 124 Manyani East Road, Nairobi, Kenya. You also have the right to complain to the Office of the Data Protection Commissioner if you believe we have mishandled your personal data.