Privacy Policy

1. Who is responsible for this site

Holentra is the website published at holentra.life. No legal company name, registration number, tax identifier or controlled physical office address has been supplied for publication. For website and privacy correspondence, use [email protected].

Where Holentra determines why and how personal data submitted to this website is used, it acts as the relevant data controller for that processing. Hosting and email providers may act as processors or independent controllers depending on their services and terms.

2. Categories of data handled

Contact-form data: name, email address, selected subject, message content, consent confirmation and technical information needed to process the request. Do not submit detailed medical records, national ID numbers, payment information or highly sensitive information through the general contact form.

Technical/server data: the hosting environment may record IP address, request time, requested page, response status, user agent and security-related logs as part of normal web-server operation.

Local storage: the site stores a simple value in your browser when you dismiss the storage notice, so the notice does not reappear on every page.

Analytics/advertising: GA4, GTM, Cookiebot, reCAPTCHA and advertising tags are not active in the current configuration because no valid IDs or keys have been supplied.

Affiliate tracking: the business model is affiliate publishing, but no affiliate partner or affiliate destination is currently configured. The current build therefore does not intentionally set affiliate tracking cookies.

3. Purposes and legal grounds

Contact details are used to answer messages, manage editorial corrections, handle privacy requests, prevent abuse and maintain reasonable records of correspondence. Processing may rely on consent where you actively submit information, on steps requested by you, and on legitimate interests such as security, fraud prevention and maintaining the integrity of the website, subject to applicable Kenyan law.

Kenya’s Data Protection Act, 2019 requires lawful, fair and transparent processing, purpose limitation, data minimisation, accuracy, storage limitation and appropriate safeguards. Holentra aims to apply those principles to the website functions actually in use.

4. Cookies, local storage and similar technologies

The current site does not intentionally place analytics or advertising cookies. It uses browser localStorage only to remember dismissal of the informational storage banner. Essential hosting or security infrastructure may use technically necessary mechanisms outside the page code; those depend on the hosting environment.

If optional analytics, advertising or affiliate tracking is added later, this policy and the Cookies & Local Storage Policy should be updated and any legally required preference/consent controls should be implemented before activation.

5. Recipients and service providers

Contact messages may pass through the web host and the email service used for [email protected]. Technical logs may be accessible to hosting or security providers where necessary to operate the site. Holentra does not describe any specific processor by name here because no hosting, analytics, CRM or email-vendor details were supplied for this build.

Personal data should not be sold merely because someone used the contact form. If a future affiliate relationship involves data sharing rather than an ordinary link click, that flow must be separately disclosed before use.

6. International transfers

Internet infrastructure and email services can involve processing outside Kenya. Kenyan data-protection rules restrict transfers where adequate safeguards or another valid basis is not available. Because the specific production hosting and email vendors were not supplied, this policy does not make unsupported claims about server location or transfer mechanisms. The operator should confirm those details before production deployment where required.

7. Retention

Contact correspondence should be retained only as long as reasonably necessary to answer the request, manage follow-up, resolve disputes, meet legitimate record-keeping needs or comply with law. Security logs are normally retained according to hosting/security configurations. No fixed period is invented here because the production infrastructure has not been specified.

8. Security

The site uses input validation and a honeypot field for the contact form. Security also depends on HTTPS, server configuration, access controls, software updates, backups and the practices of hosting/email providers. No website can guarantee absolute security.

9. Your rights in Kenya

Under Kenya’s data-protection framework, data subjects have rights that include being informed about use of personal data, access, objection, correction of false or misleading data and deletion of false or misleading data. ODPC materials also describe rights relating to erasure, portability and restriction where applicable.

To make a request concerning data handled by Holentra, email [email protected] and explain what you are asking for. Reasonable verification may be requested before disclosing or changing personal data. You may also have a right to complain to Kenya’s Office of the Data Protection Commissioner.

10. Children

Holentra is general adult-oriented health information and is not designed to collect personal data from children through targeted services. If a parent or guardian believes a child submitted personal information through the contact form, they may request review or deletion.

11. Policy changes

This policy may be updated when the site’s functionality, service providers, affiliate relationships or legal requirements change. Material changes should be reflected on this page before newly described processing is relied upon.

12. Contact

Privacy questions and rights requests: [email protected].