Published: 11 October 2026
Effective: 11 October 2026
Website: https://nairobipostalcodes.org
Operator: Nairobi Postal Codes
Nairobi Postal Codes respects your privacy. This Privacy Policy explains how we handle personal information when you browse our website, use its search features, comment on posts or contact us.
It describes the information involved, why we use it, how it may be shared, how long we retain it and the choices and rights available to you.
1. About this policy
Nairobi Postal Codes operates an independent informational website providing postal code information and related guidance.
For the website activities described in this policy, Nairobi Postal Codes determines the purposes and means of processing personal information and acts as the data controller.
This policy is guided by Kenya’s Data Protection Act, 2019 and applicable implementing regulations. Other privacy requirements may apply depending on the circumstances.
The website is independent of the Postal Corporation of Kenya and government authorities. Privacy enquiries about this website should be directed to us through our Contact page. Contact information for external organisations displayed elsewhere on the website is for those organisations’ services.
2. Information we collect
Information you provide when contacting us
When you use our Contact page, we receive the information you submit, such as:
- Your name.
- Your email address.
- The subject of your enquiry.
- Your message and any personal information included in it.
We use this information to understand your enquiry, respond where appropriate and maintain relevant correspondence.
Please provide only information necessary for your enquiry. Avoid sending passwords, payment details, identity documents or sensitive personal information unless there is a specific and necessary reason.
Information you provide through comments
When you comment on a post, we receive the comment and the identifying or contact information you enter in the comment form.
A published comment and its displayed name may be visible to other visitors, indexed by search engines or copied by third parties. An email address supplied in a designated email field is not intended for public display.
Please avoid including private contact details or confidential information in the comment itself.
Technical and usage information
Accessing the website involves processing technical information that may include:
- IP address.
- Browser and device information.
- Operating system.
- Pages requested and access times.
- Referring pages.
- Error, access and security records.
Our analytics and advertising services may also process information about visits, interactions, cookies and browser or device identifiers, as described below.
Searching for an area or postal code does not, by itself, require you to provide your name or contact details. Search terms may nevertheless appear in page addresses, technical records or usage measurements.
3. Why we use information
We use personal information, where necessary, to:
- Deliver and operate the website.
- Respond to enquiries, feedback and correction requests.
- Review, publish and moderate comments.
- Understand website usage and improve content.
- Display and measure advertising.
- Detect spam, misuse and security problems.
- Maintain relevant operational records.
- Handle privacy requests and complaints.
- Comply with applicable legal obligations and valid legal processes.
We limit our use of information to relevant purposes and seek to avoid collecting more information than those purposes require.
4. Legal bases for processing
The legal basis depends on the particular activity.
Legitimate interests: operating an informational website, responding to ordinary enquiries, managing comments, protecting the website and maintaining necessary records, where those interests are not overridden by your rights and freedoms.
Consent: processing for which consent is required, including relevant optional analytics or advertising activities. Where we rely on consent, you may withdraw it.
Legal obligations: processing necessary to meet applicable legal requirements or respond to binding legal processes.
We do not treat the act of visiting the website as blanket consent to all processing. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
5. Google Analytics
We use Google Analytics to understand how visitors interact with the website and to improve its usefulness.
Depending on the service configuration and your privacy choices, analytics may involve information about pages viewed, visit duration, interactions, referral sources, approximate location, browser and device characteristics, and online identifiers.
We generally use analytics reports to understand patterns of website use. Aggregated reports do not mean that every stage of the underlying processing is anonymous.
For information about Google’s processing, see:
Google also provides an Analytics opt-out browser add-on. Its availability and operation depend on your browser and the technologies involved.
6. Google AdSense and advertising
We use Google AdSense to display advertisements and support the operation of the website.
Google and participating advertising providers may use cookies or similar technologies to deliver advertisements, measure performance, prevent fraud and, depending on applicable requirements, settings and choices, personalise advertising.
Advertising-related processing may involve online identifiers, technical information, advertisement interactions and browsing activity. Personalised advertising may take account of activity across websites or services.
Non-personalised advertising can still involve technical processing, cookies or identifiers for purposes such as reporting, fraud prevention and controlling how often advertisements appear.
You can learn more through Google’s advertising information and manage relevant Google advertising preferences through My Ad Center or Google’s partner advertising settings.
These controls do not necessarily stop all advertisements or every type of technical processing.
7. Cookies and privacy choices
Cookies are small files stored by your browser. Similar technologies may also store information or recognise a browser or device.
The website and its services may use these technologies for:
- Essential functionality and remembering privacy choices.
- Analytics and performance measurement.
- Advertising delivery and measurement.
- Security and prevention of misuse.
We provide a cookie banner to present information and available choices. Where consent is required for optional processing, that processing should depend on your consent.
You can also use browser settings to block or delete cookies. Blocking certain cookies may affect website functionality, and deleting cookies may remove previously saved preferences.
If you need assistance with cookie choices or withdrawing consent, contact us through our Contact page.
Our Cookie Policy provides further information and should be read alongside this policy.
8. Comments and public information
We may review comments to manage spam, inappropriate material, misleading content and personal information that should not be published.
If you want a comment containing your personal information reviewed, corrected or removed, use our Contact page and identify the relevant post and comment.
We will assess requests under applicable law, including relevant exceptions and the rights of others. Removing information from our website does not necessarily remove copies already held by search engines or third parties.
9. Sharing and disclosures
Information may be accessed or received by parties involved in the activities described in this policy, including:
- People authorised to administer the website or handle enquiries.
- Providers supporting hosting, communications, maintenance and security.
- Google and advertising participants involved in analytics or advertising.
- Professional advisers where necessary.
- Authorities or other recipients where disclosure is legally required or otherwise lawfully justified.
Public comments are also disclosed to website visitors when published.
A service provider may process information on our behalf. Some third parties, including Google for certain activities, may determine their own processing purposes under their own privacy terms.
10. Hosting and international processing
Our website is hosted on servers located in Europe. Information associated with website operation may therefore be stored or processed outside Kenya.
Google and other providers involved in operating the website may also process information in additional countries.
European hosting does not, by itself, guarantee compliance with Kenyan law or eliminate privacy risks. International processing must be assessed against applicable Kenyan requirements, including the relevant transfer basis and safeguards.
Where international transfers occur, we are responsible for ensuring that the applicable legal conditions are met. Depending on the circumstances, these may involve appropriate safeguards, an applicable adequacy decision, a legally permitted necessity ground or valid consent.
You may request information about relevant international processing through our Contact page.
11. Retention of information
We retain information for periods relevant to the purpose for which it is processed.
Contact correspondence: enquiry emails that are no longer relevant to the platform are deleted after one year. Correspondence that remains relevant may be retained longer while needed to manage an ongoing matter, maintain necessary records, resolve a dispute or comply with a legal obligation.
Comments: published comments may remain with the relevant post while they serve a useful purpose, subject to moderation, removal requests and applicable legal requirements.
Technical and security records: retention depends on their operational and security purpose. Such information should not be retained longer than necessary.
Analytics and advertising information: retention depends on the applicable service settings, provider practices and legal requirements.
Copies in backups may remain until those backups are replaced or expire under the applicable backup cycle.
12. Security and incidents
We seek to protect personal information through proportionate technical and organisational measures, including limiting access to people who need it for the purposes described in this policy.
No website, communications system or storage method can guarantee absolute security.
If an incident affects personal information, we will assess it and take appropriate steps. Where legally required, this includes notifying the Office of the Data Protection Commissioner and affected individuals.
13. Your privacy rights
Subject to applicable conditions and exceptions, Kenyan data protection law provides rights to:
- Be informed about how your personal information is used.
- Access personal information held about you.
- Request correction of inaccurate or incomplete information.
- Request erasure where the relevant legal grounds apply.
- Object to processing.
- Request restriction of processing.
- Request data portability where applicable.
- Withdraw consent for processing based on consent.
- Exercise rights concerning solely automated decisions producing legal or similarly significant effects.
Some rights depend on the processing activity, legal basis and circumstances. For example, a deletion request may be subject to a lawful requirement to retain certain information.
14. How to make a privacy request
Submit your request through our Contact page, using “Privacy Request” as the subject.
Explain the request and provide enough information to help us locate the relevant records. For comments, include the post address and details identifying the comment.
We may request proportionate additional information to verify identity or authority before releasing, changing or deleting personal information. Please do not send identity documents unless requested and necessary.
We will handle requests within the applicable statutory time limits. Under Kenya’s General Regulations, these include:
- Access requests: within seven days.
- Rectification: within fourteen days where rectification is necessary.
- Erasure requests: a response within fourteen days.
- Restriction and objection requests: within fourteen days, subject to the relevant provisions.
- Portability: within thirty days, where applicable.
If a request cannot lawfully be fulfilled, we will explain the relevant reason and available next steps.
15. Children’s privacy
The website provides general information that may be accessed by people of different ages.
Children should avoid submitting personal information through comments or enquiries without appropriate parental or guardian involvement.
Where processing a child’s personal information requires parental or guardian consent, that requirement applies alongside protections for the child’s rights and best interests.
A parent or guardian concerned about information submitted by a child may contact us through the Contact page. We will review the matter and take appropriate action.
16. External websites
Our website includes links to external websites.
Following a link may result in information being processed by the destination website under its own privacy terms. A link does not mean that Nairobi Postal Codes controls that website’s practices.
Review the destination’s privacy information before submitting personal information.
17. Authorities and complaints
We cooperate with competent authorities in accordance with applicable law.
Authorities may contact us through our Contact page. We assess the authority, legal basis and scope of a request before disclosing personal information. Receiving a request does not automatically authorise unrestricted access to visitor information.
If you have a concern about our handling of your information, you may raise it with us through the Contact page.
You also have the right to complain to Kenya’s Office of the Data Protection Commissioner. You do not need our permission to do so. Information is available on the ODPC complaint page.
18. Changes to this policy
We may revise this policy when our services, processing practices or legal requirements change.
Revisions will be published on this page with an updated revision date. Where required, we will provide additional notice or seek fresh consent.
Publication of a revised policy does not, by itself, constitute your consent to new processing activities.
19. Contact
For privacy enquiries, requests, concerns or authority correspondence, contact Nairobi Postal Codes through:
