Privacy Policy

PLAIN-ENGLISH SUMMARY

Akili Talent is a Kenyan-based talent solutions and CX outsourcing company serving fast-growing DTC brands globally. This policy explains what data we collect from clients, candidates, and website visitors i.e., why we need it, how we protect it, and what rights you have. We never sell your personal data. We collect only what we genuinely need.

01 Who We Are

Akili Talent is a talent solutions and customer experience (CX) outsourcing firm headquartered in Nairobi, Kenya. We help direct-to-consumer brands build and scale high-performing customer-facing teams incl. CX team placement, talent sourcing, and managed support solutions for clients primarily in the US, UK, Europe, and beyond.

As a Kenyan-registered business, we are governed by the Kenya Data Protection Act, 2019 (DPA) and registered with the Office of the Data Protection Commissioner (ODPC). Because we serve clients and work with individuals internationally, we also align our practices with the EU GDPR, UK GDPR, and US CCPA/CPRA.

For all data protection matters: privacy@akilitalent.com

02 Data We Collect

We collect only what is necessary to deliver our services:

From Clients & Business Contacts

• Name, job title, company, and business email address

• Phone number and business address

• Communications, meeting notes, and project briefs shared with us

• Invoicing details (company name, billing address, payment reference)

From Candidates & Talent

• Full name, contact details, and location

• CV, work history, qualifications, and references

• Interview responses and assessment results

• Professional profiles e.g., LinkedIn, where publicly available

From Website Visitors

• IP address, browser type, and device information (collected automatically)

• Pages visited, session duration, and referral source

• Form submissions e.g., contact enquiries

• Cookie identifiers (see Section 8 for details)

WHAT WE DON'T COLLECT

We do not collect sensitive personal data such as health information, biometric data, racial or ethnic origin, religious beliefs, or financial account credentials beyond what is strictly required for invoicing.

03 How We Use Your Data

We use personal data only for clear, stated purposes and do not process it beyond what is listed here without informing you first.

• Delivering our services: talent placement, CX outsourcing, and client account management.

• Candidate matching: screening, evaluating, and placing candidates into relevant roles.

• Client communications: responding to enquiries, sending updates, and managing projects.

• Business outreach: sharing relevant service information with B2B contacts (opt-out available at any time).

• Legal and contractual compliance: meeting obligations under Kenyan law, tax regulations, and international contracts.

• Security and fraud prevention: protecting our platforms and detecting unauthorized activity.

• Service improvement: using anonymized analytics to understand how our website is used.

LEGAL BASIS FOR PROCESSING

Under the Kenya DPA, EU GDPR, and UK GDPR, we process data on the basis of: your consent (withdrawable at any time), contractual necessity (to deliver our services), legal obligation, or legitimate business interests balanced against your rights. For US residents, we process data only for disclosed business purposes and do not sell personal information.

04 Sharing & International Transfers

We do not sell your personal data. We share it only where necessary:

• Our clients: candidate profiles shared only when a specific placement is relevant, and with your knowledge.

• Service providers: third-party tools (CRM, email, cloud storage) bound by data processing agreements.

• Professional advisors: lawyers, accountants, and auditors under strict confidentiality obligations.

• Regulatory or legal authorities: when required by law or valid legal process.

• Cross-border transfers: Data may be transferred outside Kenya when serving global clients. We apply the following safeguards:

05 How Long We Keep Your Data

We retain data only as long as necessary. When no longer needed, it is securely deleted or anonymized.

06 Your Rights

Regardless of your location, we respect your right to control your personal data. The rights available depend on your jurisdiction, but we apply them consistently across all markets we serve.

• Access: Request a copy of the personal data we hold about you.

• Correction: Ask us to correct inaccurate or incomplete data.

• Deletion: Request deletion of your data, subject to legal obligations.

• Object / Opt-Out: Object to marketing, profiling, or certain processing.

• Withdraw Consent: Withdraw consent at any time where processing is consent-based.

• Data Portability: Receive your data in a portable format (EU/UK GDPR & CCPA).

Regional Specifics

HOW TO SUBMIT A REQUEST

Email privacy@akilitalent.com with subject 'Data Rights Request'. Include your name, location, and the nature of your request. We acknowledge within 5 business days and respond fully within 30 days.

07 How We Keep Your Data Safe

We take data security seriously. Our measures include:

• Encryption: data encrypted at rest and in transit.

• Access controls: personal data accessible only to team members who need it.

• Processor agreements: all third-party tools bound by data processing agreements.

• Breach response: we notify the ODPC and affected individuals promptly per Kenya DPA Section 43 and GDPR Article 33 (72-hour regulator notification).

If you believe your data has been compromised, contact us immediately at privacy@akilitalent.com.

08 Cookies

Our website uses cookies to function and to understand how it is used. We keep this minimal and transparent.

Manage or withdraw cookie consent at any time via our cookie preference center or your browser settings. EU and UK visitors are asked for opt-in consent before non-essential cookies are placed, in line with GDPR and PECR.

09 Contact & Complaints

If you have questions, want to exercise your rights, or wish to raise a concern, please contact us first. We will always aim to resolve your concern directly.

ESCALATION: REGULATORY AUTHORITIES

If we do not resolve your concern satisfactorily, escalate to the relevant authority: Kenya at ODPC (odpc.go.ke); EU via your national DPA; UK at ICO (ico.org.uk); USA at CPPA (cppa.ca.gov).

This Privacy Policy was last updated in March 2026 (Version 1.0). Material updates will be posted on our website and, where required by law, communicated directly to you.