Privacy

What we collect, and what we do with it

This describes what this website actually does. It was written by going through the database and the code, not from a template, and it is updated whenever what we collect changes.

Last updated 13 August 2026

Who is responsible

Two companies operate together under the ABITECH name:

ABITECH Worldwide Management Holding B.V. Otto Reuchlinweg 1008/1146, Rotterdam, Netherlands

ALF Holdings East Africa Limited reg. CPR/2012/90232, Karuri, Kenya

Because the Dutch company is established in the European Union, the GDPR applies to this website, and so does the Dutch Telecommunications Act where cookies are concerned. For anything on this page, write to [email protected].

What we collect, and only when you give it

We do not require an account, and there is nothing to sign up for in order to read this site. We hold personal data in exactly four places, all of them things you typed into a form:

If you subscribe with your email address

We store your email address, the page you subscribed from, and a confirmation token. That is all. We used to record your IP address and your browser's user-agent string too; we stopped on 13 August 2026, because we never actually used them for anything. Subscriptions made before that date still carry those two values, and you can ask us to clear them. Every email carries a one-click unsubscribe link, and unsubscribing takes effect immediately. Be aware that unsubscribing stops the email but does not by itself erase the record — we keep the address on a suppression list so that we do not accidentally mail you again. If you want it gone entirely, ask us and we will delete it.

If you use the contact form

We store your name, email address, subject and message, so that we can answer you. The message is also forwarded to a private operator chat so somebody sees it quickly.

If you send a sourcing or investment enquiry

The enquiry forms ask for your name, work email, company, country of incorporation, country of payment, and the commercial details of what you are asking for. We need those to answer the enquiry and to meet the checks that apply to this kind of trade. As with the contact form, a notification goes to the operator chat.

If you signed a non-disclosure agreement with us

Where an NDA was signed through this site we hold the name, email address, phone number and identity-document number given at signing, because that is what makes the agreement enforceable. That form has been withdrawn and no new signatures can be made through the site.

If you hold an old ABITECH account

A small number of accounts remain from a membership system we have retired. Registration is closed and the sign-up pages no longer exist. Those records hold a name, email address, company, country, the IP address the account was created from, and a hashed password. We never store a password in a readable form.

Cookies

On a first visit this site sets exactly one cookie:

_csrf — security24 hours

It exists so that a form submitted on this site cannot be forged by another site. It carries no information about you, it cannot be read by scripts, and it is not shared. It is strictly necessary, so it is set without asking — a site cannot accept a form safely without it.

Analytics cookies are a separate matter and we ask first. Nothing from Google Analytics is loaded, and no analytics cookie is set, unless you press Accept on the notice at the bottom of the page. If you decline, the analytics script is never even requested. Your choice is remembered in your own browser's local storage under abi_consent; it is not sent to us.

If you accept, Google Analytics sets _ga and _ga_<id> to recognise a returning browser. We use it only to count pages and referrers in aggregate. We have IP anonymisation switched on, and we do not run advertising, remarketing or profiling on this site.

This clears the choice stored in this browser and brings the notice back. If you previously accepted, any analytics cookies already set are cleared through your browser's own settings, not from here.

Who else sees data

Cloudflare

Sits in front of this website to serve it quickly and to absorb attacks. All traffic passes through it, so it processes IP addresses on our behalf.

Resend

Delivers the email we send you. It receives the address the message goes to.

Google Analytics

Only if you accept. Google processes data outside the European Union.

Google Fonts

The typefaces on this site are requested from Google's servers, which means your IP address reaches Google when a page loads, before any choice about cookies. We would rather serve those files ourselves and intend to.

A private operator chat

When you send us an enquiry, a notification containing what you wrote is delivered to a private team channel so it is seen quickly.

We do not sell personal data, we do not share it for advertising, and we do not buy contact lists.

How long we keep it

Plainly: this site has no automatic deletion. An enquiry or a subscription stays in our records until you ask us to remove it, or until we no longer have a reason to hold it. We would rather tell you that than quote a retention period we do not actually enforce. Ask us to delete your data and we will, and you do not have to give a reason.

Two things do expire on their own. Our web server's access logs, which record the IP address of every request, are deleted after fourteen days. And sign-in links, where they still apply, stop working an hour after they are issued and are cleared a week later.

We keep encrypted backups of our database so that we can recover from a failure. A deletion you ask for is applied to the live database immediately; copies inside older backups age out as those backups are replaced.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it, or ask for it in a portable form. Write to [email protected] and we will answer within a month.

If you are in the European Union and you think we have handled your data badly, you can complain to your national supervisory authority. For the Netherlands that is the Autoriteit Persoonsgegevens. In Kenya it is the Office of the Data Protection Commissioner.

The other ABITECH sites

Our staffing platform at kazi.abitech.io and our aviation platform at abitechaviation.co.ke are separate services with their own systems. Nothing you enter here is shared with them, and nothing entered there reaches this site.

Children

This site is for businesses and investors. It is not aimed at children and we do not knowingly collect data from them.

Changes

When what we collect changes, this page changes with it, and the date at the top moves. We do not make quiet edits.