Legal

Privacy Policy.

What we collect, why we collect it, who it reaches and what you can ask us to do with it.

This policy explains what personal information Waveform Entertainment collects through this website, why we collect it, who it is shared with and what you can ask us to do with it. It is written to be read, not to be survived.

Who we are

Waveform Entertainment is a technical event production company based at Tsavo, Ngong Road, Nairobi, Kenya. We supply sound, staging, LED screens, backline, event branding and technical production for events across Kenya and the wider region.

For the purposes of the Data Protection Act, 2019, we are the data controller for the information described below. That means we decide what is collected and why.

What we collect

We only collect information you type into one of our three forms, plus the technical records any website keeps in order to run safely.

When you request a quote

The booking form asks for: your name, your company or organisation if you give one, your email address, your phone number, the type of event, the event date, the venue, the location, the expected number of guests, the services you are interested in, and any details you choose to add.

We also record the date and time of the submission and the IP address it came from. The IP address is kept as an anti-abuse measure, so that we can identify automated or malicious submissions.

When you send a message

The contact form asks for your name, your email address, your phone number and your message.

When you subscribe to our newsletter

The signup in the footer of every page asks for one thing: your email address. We record the date you subscribed and which page you subscribed from, so we know where the interest came from.

Your address is stored on this website and is not sent to any mailing-list company or other third party. We keep it until you ask us to remove it, and you can ask at any time using the contact details at the end of this policy. We use it only to send occasional notes about event production and our own work, and for nothing else.

We briefly note the IP address a signup came from in order to limit repeated automated submissions. That note is discarded automatically within an hour and is never attached to your subscription.

Technical and security records

Our web host keeps standard server logs, which include IP addresses and the pages requested. Our login protection software records failed sign-in attempts, including the IP address they came from, in order to block repeated attacks on the administrator account. These records concern the security of the site itself, not visitors browsing it.

What we do not do

We want to be specific about this, because most privacy policies are not.

  • We do not use advertising or analytics tracking on this website. There is no Google Analytics, no advertising pixel and no social media tracker.
  • We do not sell, rent or trade your personal information to anyone, for any purpose.
  • We do not use your information to build a profile of you, and we do not make automated decisions about you.
  • We do not send marketing emails to people who simply enquired. If we ever start a mailing list, it will be something you opt into deliberately.

Why we collect it

We use the information you send us to prepare a quotation, to answer your question, to plan and deliver an event you book with us, and to keep our own records of work we have done.

Under the Data Protection Act, 2019 we must have a lawful basis for each of those, and we do not rely on the same one for everything.

Quote requests and messages

When you submit the booking form or the contact form, you are asking us to take steps towards a possible booking. Our basis is therefore the performance of a contract, and the steps taken at your request before entering into one, rather than your consent.

This is why we do not ask you to tick a consent box to send us an enquiry. You cannot get a quote without us reading what you sent, so a tick box there would not be a real choice, and a consent you have no real choice about is not a meaningful one. Submitting the form is your request; this page is the notice that tells you what happens to it afterwards.

The newsletter

This one is different, because it is marketing rather than something you have asked us to quote for. We send it only on the basis of your consent, given when you enter your address in the signup. You can withdraw that consent at any time and we will remove your address, and doing so affects nothing else: it has no bearing on an enquiry or an event we are handling for you.

Technical and security records

Server logs, failed sign-in records and the anti-spam checks on our forms are kept on the basis of our legitimate interest in keeping the site available and free of abuse.

Where you go on to book us, we also process what we need in order to deliver the event and to meet our accounting and tax obligations.

Who it is shared with

Your information is handled by the people at Waveform Entertainment who need it to respond to you or to deliver your event. Beyond that, it reaches only the suppliers who make the website work:

  • Our web hosting provider, which stores the website and its database, and which transmits the notification emails our forms send.
  • Google Fonts, which serves the two typefaces this site uses. Your browser requests those font files directly from Google, and in doing so Google receives your IP address. No form data is involved, and no cookie is set by it.

We will also disclose information where the law requires it, for example in response to a lawful order from a court or a regulator.

How long we keep it

Quote requests and messages are kept for as long as they are commercially useful, which for event work means the enquiry, the event itself and a reasonable period afterwards for reference, warranty and accounting purposes. Where an enquiry does not lead to a booking, we remove it once it is clearly no longer live. You can ask us to delete your information sooner, and we will unless we are required to keep it.

Cookies

This website sets no advertising or analytics cookies. WordPress, the software the site runs on, sets cookies only for people who log in to administer the site. If you are simply reading these pages or filling in a form, no cookie is placed on your device by us.

Security

The site is served over an encrypted HTTPS connection. Administrative access is protected by individual accounts and by software that blocks repeated failed sign-in attempts. Form submissions are checked for automated abuse. That check records only the reason a submission was rejected, the time, the browser identifier and a one-way hash of the sending address: the address itself is never written down and the hash cannot be turned back into it. The same hash is used to limit how many times one sender can submit a form in an hour. No system is perfectly secure, and we do not claim otherwise, but we take the protection of your information seriously and we will tell you and the regulator if a breach occurs that is likely to affect you.

Your rights

Under the Data Protection Act, 2019 you have the right to:

  • be told how your personal data is being used, which is what this page is for;
  • access the personal data we hold about you;
  • have inaccurate or misleading data corrected;
  • have your data deleted;
  • withdraw your consent at any time where we rely on it, which for us means the newsletter;
  • object to or restrict how we process it; and
  • receive a copy of the data you gave us in a usable format.

To exercise any of these, contact us using the details below. We will respond as quickly as we reasonably can. If you are not satisfied with our answer, you may complain to the Office of the Data Protection Commissioner.

Children

This website is aimed at people booking event production services and is not directed at children. We do not knowingly collect personal information from anyone under eighteen. If you believe a child has sent us their information, contact us and we will delete it.

Changes to this policy

If we change how we handle personal information, we will update this page and change the date shown alongside it. Material changes will be made clear rather than slipped in.

Contact us

For any question about this policy, or to make a request about your personal data:

Booking
Booking