An information communication technology company dedicated to developing innovative IT solutions.
Last updated: 27 July 2026
African Script Global Solutions ("African Script", "we", "us", "our") is an information communication technology company registered in Kenya, with offices at Pension Towers, Loita Street, 10th Floor, Nairobi. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website, contact us, or use any of our products and services - including our websites and e-commerce builds, systems and mobile app development, hosting, digital marketing, our school management products (ElimuCore, the CBC Exam & Grading Management System, and the School Fees Management System), and Ustadi, our business management (ERP) platform.
This Policy is written to meet the requirements of the Kenya Data Protection Act, 2019 and its regulations. It applies across all African Script products and platforms rather than as a separate document per product, because the same organisation, the same data protection obligations, and largely the same categories of data apply to all of them. Where a specific product processes data in a materially different way (for example, a school system processing data about pupils on behalf of a school), that is called out below and, for our business clients, is additionally governed by a signed Data Processing Agreement.
This Policy applies to: visitors to our website; people who submit an enquiry, request a quote, or sign up for our newsletter or WhatsApp updates; our clients and their authorised users; end users of systems we build or host on behalf of a client (for example, parents, teachers, or pupils using a school system we operate for a school); and job applicants and staff, who are covered by our internal HR privacy notice in addition to this Policy.
We collect information in the following ways:
We use personal data to:
Under the Data Protection Act, 2019, we rely on one or more of the following legal bases, depending on the situation: your consent (for example, when you opt in to marketing updates); the performance of a contract with you or steps you asked us to take before entering one (for example, preparing a quote or delivering a project); our legitimate interests as a business (for example, keeping our website secure or improving our services), balanced against your rights; and compliance with a legal obligation (for example, retaining financial records for tax purposes).
Our website uses cookies and similar technologies to keep the site working correctly, remember your preferences, measure site performance, and, where applicable, support advertising. You can control or disable cookies through your browser settings; doing so may affect how parts of the site function. We also use reCAPTCHA on our forms to prevent spam and abuse, which involves Google processing some technical data as described in Google's own privacy policy.
We do not sell personal data. We share information only where necessary, with:
Where we act as a data processor for a client (for example, operating a school system on a school's behalf), we only share that data as instructed by the client, who remains the data controller.
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including access controls, encrypted connections, and restricting staff access to what each role needs. No method of transmission or storage is completely secure, and while we work to protect your data, we cannot guarantee absolute security.
Some of our service providers (for example, cloud hosting or email delivery infrastructure) may process data outside Kenya. Where this happens, we take steps required under the Data Protection Act, 2019 to ensure the data continues to be adequately protected, such as using providers with appropriate safeguards and, where applicable, contractual data protection commitments.
We keep personal data only for as long as necessary for the purposes described in this Policy, including to meet legal, accounting, or reporting requirements. Enquiry and marketing data that never turns into a client relationship is retained for a limited period and then deleted or anonymised; client and financial records are retained for the periods required by Kenyan tax and company law.
Under the Data Protection Act, 2019, you have the right to: be informed of how your data is used; access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to our legal retention obligations; object to or restrict certain processing; request data portability, where applicable; and withdraw consent at any time where processing is based on consent. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, if you believe your rights have been infringed.
To exercise any of these rights, contact us using the details in Section 13.
Our website is not directed at children, and we do not knowingly collect personal data from children through it. Some of our products (such as ElimuCore, a CBC exam & grading system, and a school fees system) involve data about pupils, but in those cases the data is provided and controlled by the school as data controller, and we process it strictly as instructed under a Data Processing Agreement with that school.
We may update this Policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top of this page shows when it was last revised. Material changes will be highlighted on our website.
Questions, requests, or complaints about this Policy or how we handle your data can be directed to:
African Script
Pension Towers, Loita Street, 10th Floor, Nairobi, Kenya
Email: info@africanscript.com
Phone: +254 727 468 148 / +254 733 468 148
This Privacy Policy is a template drafted for African Script and has not yet been reviewed by a lawyer. It should be reviewed by a qualified Kenyan advocate before being relied on as a final, binding policy.