GateFlow Africa
Privacy notice
This implementation is a product baseline, pending controller-specific notices and review by Kenyan counsel and the appointed DPO.
What is processed
Account and membership details, visitor invitation and access records, necessary contact information, device/session metadata, and security audit evidence.
Why and for how long
Data is processed for documented access, safety, service, and accountability purposes. Retention is configured by record class and estate policy, with legal holds applied only where authorized.
Your choices and rights
Authenticated workflows support access, correction, objection or restriction, portability, and deletion requests, subject to lawful security-record exceptions.
Contact
Privacy requests: privacy@gateflow.africa. The production notice must identify the relevant controller, processor roles, locations, subprocessors, and statutory timelines.