Privacy Policy

Enovise GROUP (“we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect when you visit our website or engage with our services, how we use it, and the rights available to you.

By using our website or contacting us, you acknowledge you have read and understood this policy.

Enovise GROUP is a cyber capability organisation headquartered at Prosperity House, 7th Floor, Westlands Rd, Museum Hill, Nairobi, Kenya. We operate across multiple jurisdictions including Kenya, Rwanda, the United Kingdom, Botswana, Malawi, and Zambia.

For data protection enquiries, contact us at dpo@enovise.com.

We may collect the following categories of personal information:

• Contact information — name, email address, phone number, job title, and organisation, when you submit an enquiry or engagement request.
• Usage data — pages visited, time on site, referring URL, browser type, and device information, collected automatically via cookies and analytics tools.
• Communication records — content of messages sent to us and our responses.
• Newsletter subscriptions — email address when you subscribe to our intelligence briefs or communications.

We do not knowingly collect data from individuals under 18 years of age.

We use the information we collect to:

• Respond to enquiries and manage engagement requests.
• Deliver services and operational communications under contract.
• Send threat intelligence briefs or newsletters where you have subscribed.
• Improve our website performance and user experience.
• Comply with legal obligations and regulatory requirements.
• Protect the security of our systems and services.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Where applicable under data protection law, we process your personal data on the following legal bases:

• Consent — for newsletter subscriptions and optional communications.
• Contractual necessity — for delivering agreed services.
• Legitimate interests — for website analytics and service improvement.
• Legal obligation — where processing is required by law.

Our website uses cookies and similar tracking technologies to understand how visitors use the site. These may include essential cookies required for the site to function, and analytics cookies that help us improve performance.

You may disable cookies through your browser settings. Note that some features of the website may not function correctly without them.

We retain personal data only as long as necessary for the purposes described in this policy or as required by applicable law. Enquiry and engagement records are retained for a minimum of 3 years. Newsletter subscription data is retained until you unsubscribe.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Given the nature of our work, we apply rigorous security standards to all data handling processes.

No method of transmission over the internet is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

We may share your information with:

• Service providers — trusted third parties who assist us in operating our website or delivering services (e.g. hosting, analytics, email delivery), under strict data processing agreements.
• Legal authorities — where required by law, regulation, or court order.
• Group entities — other entities within the Enovise GROUP where necessary to deliver services.

All third parties are required to handle your data in accordance with applicable privacy laws.

As we operate across multiple countries, your data may be transferred to and processed in jurisdictions outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable law, including standard contractual clauses where required.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data where no longer necessary.
• Restriction — request that we limit processing of your data.
• Objection — object to processing based on legitimate interests.
• Portability — request transfer of your data in a structured format.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at dpo@enovise.com. We will respond within 30 days.

Our website may contain links to external sites, including our innovation platforms (ThreatSeal, COREVEX, Redpherix). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website following any changes constitutes acceptance of the updated policy.

For questions, requests, or complaints regarding this Privacy Policy or our data practices, contact us at dpo@enovise.com.