Effective Date:
SavannaCX Limited ("we," "our," or "us") is committed to protecting the privacy and security of personal data processed through our Customer Experience Protection platforms and services. This Data Protection Policy outlines our approach to data protection compliance in accordance with the Kenya Data Protection Act, 2019 and other applicable data protection regulations.
As a provider of CX protection solutions, we process data through our "Evaluate by SavannaCX" field evaluation platform and "Insights by SavannaCX" client dashboard to deliver actionable insights that help businesses identify and prevent customer experience failures before they impact revenue and customer relationships.
This policy applies to all personal data processed by SavannaCX Limited, including data relating to:
Business contact information, account data, and service engagement records.
Personal data of evaluators using our "Evaluate by SavannaCX" platform for customer experience assessments.
Individuals accessing our client dashboards and evaluation platforms.
We adhere to the following fundamental data protection principles in all our processing activities:
We process personal data lawfully, fairly, and transparently, with appropriate legal bases including contractual necessity, legitimate interests, and where required, explicit consent.
Personal data is collected for specified, explicit, and legitimate purposes related to CX protection services and not further processed in a manner incompatible with those purposes.
We collect only personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
We take reasonable steps to ensure personal data remains accurate and, where necessary, kept up to date.
Personal data is kept in a form which permits identification of data subjects for no longer than necessary for the purposes for which the personal data is processed.
We process personal data in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
We are responsible for, and able to demonstrate compliance with, all data protection principles outlined herein.
In accordance with applicable data protection laws, data subjects have the following rights regarding their personal data:
The right to obtain confirmation as to whether personal data concerning them is being processed and access to such data.
The right to have inaccurate personal data rectified and incomplete personal data completed.
The right to have personal data erased under certain specified circumstances.
The right to obtain restriction of processing in specific situations.
The right to receive personal data in a structured, commonly used, and machine-readable format.
The right to object to processing of personal data based on legitimate interests or direct marketing.
The right not to be subject to decisions based solely on automated processing that produce legal effects.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
Encryption of data in transit and at rest, secure access controls, regular security testing, and vulnerability management.
Staff training on data protection, confidentiality agreements, and role-based access controls.
Secure facilities and infrastructure hosting for all our CX protection platforms.
Established procedures for detecting, reporting, and investigating personal data breaches.
SavannaCX does not sell personal data. We may share personal data with:
Carefully selected processors who provide services on our behalf under strict data processing agreements.
When required by law, regulation, or legal process.
In connection with mergers, acquisitions, or sale of business assets, with appropriate confidentiality protections.
Our data protection practices comply with the Kenya Data Protection Act, 2019 and align with international data protection standards.
We have designated a Data Protection Officer to oversee compliance with this policy and applicable data protection laws.
We regularly review and update our data protection measures to ensure ongoing compliance and alignment with best practices.
This Data Protection Policy is reviewed annually or as needed to reflect changes in our services, legal requirements, or data processing activities. Material changes will be communicated through appropriate channels. The continued use of SavannaCX services constitutes acceptance of the updated policy.
For data protection inquiries, to exercise your data subject rights, or to report concerns regarding our data processing activities, please contact:
Email: privacy@savannacx.co.ke
Response Time: We endeavor to respond to all legitimate data protection requests within 30 days as required by law.
SavannaCX Limited — Protecting customer experiences through secure, compliant data processing that enables proactive identification and prevention of CX failures.