Obel.dev ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our website and contact form, why we collect it, how it is stored, and your rights under applicable law — including the Kenya Data Protection Act 2019 (KDPA), the EU General Data Protection Regulation (GDPR), and the Protection of Personal Information Act (POPIA) of South Africa.
1 Data Controller
As the data controller, Obel.dev determines the purposes and means of processing your personal data in connection with this website.
2 What Data We Collect
Contact Form
When you submit the contact form on our website, we collect:
- Full name — to address you by name
- Email address — to reply to your inquiry
- Company / institution — to understand your context
- Service of interest — to route your inquiry correctly
- Message — the content of your inquiry
Analytics (only with your consent)
We use Google Analytics 4 (GA4) with IP anonymisation enabled. If you accept analytics cookies via our cookie banner, GA4 may collect anonymised usage data (pages visited, scroll depth, click events). No advertising tracking is enabled, and no individually identifiable data is sent to Google.
Spam Prevention
Our form uses a honeypot field and Google reCAPTCHA to detect automated submissions. reCAPTCHA processes certain device and browser information per Google's Privacy Policy.
3 Why We Collect It & Legal Basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Respond to your inquiry | Name, email, company, service, message | Consent (checkbox at submission) & Legitimate Interest |
| Analytics & site improvement | Anonymised usage data via GA4 | Consent (cookie banner) |
| Spam & abuse prevention | reCAPTCHA signals | Legitimate Interest |
We will never use your contact data for unsolicited marketing or share it with third parties for their own marketing purposes.
4 How Data Is Stored
Contact Form Submissions
Form submissions are processed and stored by Netlify, a US-based platform. Netlify is GDPR-compliant and implements appropriate safeguards for international data transfers. Data is only accessible to authorised Obel.dev team members.
Analytics Data
Analytics data is processed by Google LLC via Google Analytics 4. All data is anonymised before transmission (IP anonymisation is enabled). No cross-site tracking or advertising identifiers are used.
5 Data Retention
- Inquiry / contact data — retained for up to 2 years from the date of submission, or until you request deletion, whichever is sooner.
- Analytics data — retained for the GA4 default of 14 months, after which it is automatically deleted from Google's servers.
-
Cookie consent preferences — stored in your browser's
localStorageindefinitely until you clear it or change your preference.
6 Your Rights
Depending on your location, you may have the following rights regarding your personal data under the KDPA 2019, GDPR, and/or POPIA:
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to correct inaccurate or incomplete data.
Deletion ("right to be forgotten")
Request that we erase your personal data where there is no overriding lawful basis to retain it.
Withdraw Consent
Withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
Portability
Receive your data in a structured, commonly used, machine-readable format.
Objection
Object to processing based on legitimate interests where your interests or rights override ours.
To exercise any of these rights, contact us at privacy@obel.co. We will respond within 30 days. If you are in Kenya, you may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC). If you are in the EU/EEA, you may contact your local supervisory authority.
7 Cookies & Analytics
We use Google Consent Mode v2. Analytics cookies are off by default and only activated if you click Accept Analytics on the cookie banner shown on your first visit.
| Cookie / Storage | Purpose | Expiry |
|---|---|---|
| obel_analytics_consent | Stores your cookie consent preference (localStorage) | Persistent (until cleared) |
| _ga, _ga_* | Google Analytics — distinguishes users (only set with consent) | 2 years |
You can change or withdraw your cookie consent at any time by clearing your browser's localStorage for this site, which will cause the banner to reappear on your next visit. You can also opt out of Google Analytics directly via Google's opt-out browser add-on.
8 Third-Party Services
We rely on the following sub-processors. Each operates under their own privacy policies:
- Netlify — website hosting and form processing
- Google LLC — Google Analytics 4 and reCAPTCHA
- Google Fonts — web font delivery
We do not sell, rent, or trade your personal data with any third party.
9 Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
Questions or Requests?
For any privacy-related queries, data access requests, or to exercise your rights, please reach out directly:
privacy@obel.co