Xenom Energy LogoXENOMENERGYBack to home

    Privacy Policy

    Last updated: 20 October 2026

    This policy explains what personal data Xenom Energy Limited ("Xenom Energy", "we", "us") collects through xenomenergy.com and when you contact us, how we use it, and the rights you have under the Kenya Data Protection Act, 2019.

    1. Who we are

    Xenom Energy Limited is the data controller for the personal data described in this policy. You can reach us at:

    2. What we collect

    Information you give us. When you use our contact form, we collect your name, email address, phone number, company name (optional) and your message. When you email, call, message us on WhatsApp or use live chat, we collect your contact details and what you tell us.

    Information collected automatically. Like most websites, our hosting provider records basic technical information when you visit, such as your IP address, browser type, the pages you request and the time of your visit. We use this to keep the site running and secure.

    We do not use analytics or advertising trackers on this website, and we do not ask for sensitive personal data.

    3. How we use your data

    • To reply to your enquiry and prepare quotes
    • To supply products and services and manage our business relationship with you or your company
    • To keep records we are required to keep by law, such as tax and accounting records
    • To keep our website and systems secure and to prevent misuse

    We do not sell your personal data, and we do not use it for automated decisions that significantly affect you.

    4. Our lawful basis

    We process personal data only where the Data Protection Act allows it, namely:

    • Your consent, which you give when you submit the contact form. You can withdraw it at any time.
    • Taking steps towards, or performing, a contract, such as preparing a quote or supplying an order.
    • Legal obligations, such as tax and regulatory record keeping.
    • Our legitimate interests in running and protecting our business, where these do not override your rights.

    5. Who we share it with

    We share personal data only with organisations that help us run our business, and only as far as they need it:

    • The service that receives our contact form submissions and forwards them to us
    • Our email, website hosting and IT providers
    • Our live chat provider (Tawk.to), if you use live chat
    • WhatsApp (Meta), if you choose to message us there
    • Professional advisers such as lawyers and auditors
    • Government and regulatory authorities, where the law requires it

    Our website also loads its font from Google Fonts and shows our office location with an embedded Google Map. When these load, your browser sends your IP address to Google, and Google may set its own cookies for the map.

    6. Transfers outside Kenya

    Some of our service providers store data outside Kenya. When this happens, we take the steps the Data Protection Act requires, for example by using providers that offer appropriate safeguards for personal data.

    7. How long we keep it

    • Enquiries that do not lead to business: up to 24 months, then deleted.
    • Customer and transaction records: for as long as the law requires, such as tax and accounting rules.
    • Technical server logs: for a short period set by our hosting provider.

    8. How we protect it

    We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and limiting access to staff who need it. No system is completely secure, so please contact us straight away if you think your data has been put at risk.

    9. Your rights

    Under the Data Protection Act, 2019, you have the right to:

    • Be told how your personal data is used
    • Access the personal data we hold about you
    • Have inaccurate or misleading data corrected
    • Have data deleted where we no longer have a lawful reason to keep it
    • Object to our use of your data
    • Withdraw your consent at any time
    • Receive your data in a portable format, where this applies

    To use any of these rights, email info@xenomenergy.com. We may ask you to confirm your identity first. If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.

    10. Cookies

    Our website does not set its own cookies. The embedded Google Map may set Google cookies, and if you use live chat, the chat provider sets the cookies it needs to run the conversation.

    11. Children

    Our website and services are for businesses and are not directed at anyone under 18. We do not knowingly collect data from children.

    12. Changes to this policy

    We may update this policy from time to time. The date at the top shows when it last changed. Please also read our Terms of Use.