Privacy Policy

This website and the services offered under the name Oravio are operated by Afrocentic Industries Ltd ("Oravio", "we", "us"), a company incorporated in Kenya (Company No. PVT-3QULE2X), with its registered office at P.O. Box 50895–00200, City Square, Nairobi, Kenya.

For any question about this policy or your personal data, contact us at kongo.kimani@oravio.africa.

We are the data controller for the personal data described below, and we process it in accordance with Kenya's Data Protection Act, 2019.

This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have. It covers our website (oravio.africa), enquiries and bookings you make with us, and conversations you have with us over WhatsApp.

When you contact us or book a call, we collect the details you give us — typically your name, phone number, email address, and anything you choose to tell us about your business.

When you message us on WhatsApp, we receive your WhatsApp phone number, your profile name, and the content of the messages you send. If you reached us by tapping one of our ads, we also receive a referral identifier from Meta that links your message to that ad.

When you visit our website, we collect standard analytics data through Google Analytics and Google Tag Manager — such as the pages you view, your approximate location, device and browser type, and how you arrived at the site. This is collected through cookies and similar technologies.

Advertising identifiers. When you interact with our ads or our site, we may receive click identifiers (for example from Meta or Google) that help us understand which ad or source led to your enquiry.

We use your personal data to:

• respond to your enquiries and provide the services you ask for;
• schedule and manage calls and meetings;
• communicate with you over WhatsApp, email, and other channels;
• understand how our website and advertising perform, so we can improve them;
• keep records of our business relationship; and
• meet our legal and regulatory obligations.

Under the Data Protection Act, 2019, we rely on your consent (for example, when you choose to contact us or accept cookies), the performance of a contract or steps taken at your request (when you engage our services), and our legitimate business interests (such as understanding how our marketing performs), as the lawful bases for this processing.

We do not sell your personal data. We share it only with the service providers that help us run our business, and only as far as needed for them to do so. These include:

• Meta Platforms — WhatsApp messaging, and advertising measurement (Pixel and Conversions API);
• Google — website analytics (Google Analytics, Google Tag Manager);
• Anthropic — the AI service that helps generate replies to your WhatsApp messages;
• Supabase — secure database hosting where enquiry and contact records are stored;
• Vercel — hosting for our website and messaging service;
• Cal.eu — appointment scheduling;
• Zoho — our business email.

Some of these providers are located outside Kenya, which means your data may be transferred and processed abroad. Where this happens, we take reasonable steps to ensure your data continues to be protected to a standard consistent with the Data Protection Act, 2019.

We may also disclose your data where we are required to do so by law.

When you message us on WhatsApp, your message may be processed by an AI system (provided by Anthropic) to help us prepare a relevant reply. The message content is sent to that service for this purpose. We use AI to assist our responses, not to make decisions that produce legal or similarly significant effects on you.

We keep your personal data only as long as we need it for the purposes set out above, or for as long as we are required to keep it to meet legal and regulatory obligations. When we no longer need it, we delete it or anonymise it.

Under the Data Protection Act, 2019, you have the right to:

• be informed about how your data is used;
• access the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data, where there is no legal reason for us to keep it;
• object to or ask us to restrict how we use your data; and
• withdraw your consent at any time, where we relied on consent.

To exercise any of these rights, email us at kongo.kimani@oravio.africa. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (www.odpc.go.ke) if you believe your data has been mishandled.

Our website uses cookies and similar technologies, mainly for analytics, to understand how visitors use the site. You can control or disable cookies through your browser settings, though some parts of the site may not work as intended if you do.

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page.