Privacy policy

This website is run by Maxed BPO, a business process outsourcing company headquartered at Malik Heights, Ngong Road, Nairobi, Kenya. In this policy, "we", "us" and "our" mean Maxed BPO.

We are responsible for the personal data you share with us through this website. If you have any questions about this policy or how we handle your data, email [email protected].

We only collect what we need to reply to you and run this website securely:

• Contact and quote requests: your name, work email, company, phone or WhatsApp number, the service you are interested in, your team size and your message. We also record the page you sent the form from.
• Emails, calls and WhatsApp messages you send us, including any CV you email to our careers team.
• Basic technical information our servers receive automatically, such as your IP address, browser type and the time of your visit, which we use to keep the website secure and working.

This website does not use advertising or analytics cookies. It may use cookies or similar storage that are strictly necessary for the website to work. If we add analytics in future, we will update this policy and ask for your consent where the law requires it.

We do not sell your personal data, and we do not use it for automated decision-making.

• To reply to your enquiry, prepare a quote and follow up with you.
• To consider your application if you send us your CV.
• To keep this website secure and to prevent spam and abuse of our forms.
• To meet our legal and regulatory obligations.

We process your data in line with the Kenya Data Protection Act, 2019, and, where it applies to you, the EU and UK General Data Protection Regulation. We rely on the following legal bases:

• Legitimate interests: replying to business enquiries and keeping our website secure.
• Steps before entering into a contract: preparing a quote or proposal you have asked for.
• Consent: where you choose to send us information, such as a CV. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or share information.

Your information is available only to the Maxed BPO staff who need it to respond to you. We use trusted service providers to host this website, store data and send email, under contracts that require them to protect your data and use it only on our instructions.

We may also share information where the law requires it, or to protect our rights, our staff or the public.

We are based in Kenya and work with clients around the world, so your data may be processed in Kenya and in the countries where our service providers operate. Where we transfer personal data, we put appropriate safeguards in place as required by the Kenya Data Protection Act and, where it applies, the GDPR.

We keep enquiry details for as long as we need them to respond to you and follow up on your request, and then for no longer than 24 months unless you become a client. Client records are kept for the length of our contract and any period the law requires afterwards. CVs are kept for up to 12 months so we can consider you for other roles, unless you ask us to delete them sooner.

We use technical and organisational measures to protect your data, including encrypted connections, role-based access, logging and limits on who can see enquiry data. No system is completely secure, but we work to keep the risk as low as possible and will tell you and the authorities about a breach where the law requires it.

Depending on where you live, you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct data that is wrong or incomplete.
• Ask us to delete your data, or to restrict how we use it.
• Object to how we process your data, including for direct marketing.
• Ask for your data in a portable format.
• Withdraw your consent at any time, where we rely on consent.

To use any of your rights, or if you are unhappy with how we have handled your data, email [email protected] and we will respond within the time the law allows. You also have the right to complain to the Office of the Data Protection Commissioner in Kenya, or to the data protection authority where you live.

We may update this policy from time to time. The date at the top of this page shows when it was last changed.