What we do with your photographs, and everything else.

Kito is a trade name of Stillbound Limited, a company registered in Kenya. Where this policy says "we", "us" or "Kito", it means Stillbound Limited. We are the data controller for the personal data described here.

You can reach us at mykitoke@gmail.com or +254 786 377886, or by post at 34 Butere Road, Industrial Area, Nairobi, Kenya.

This policy is written to meet our obligations under the Data Protection Act, 2019 of Kenya. It explains what we collect, why we are allowed to collect it, who else sees it, how long we keep it, and what you can require of us.

We collect only what an order needs. In practice that is:

• Your name, email address and phone number, so we can build the book and reach you about it.
• The town or city we are delivering to.
• The link to the album you share with us, and roughly how many photographs are in it.
• The photographs in that album, and anything you ask us to print — a cover title, a dedication, notes about which pictures matter.
• Your order: book type, cover, page count, finish, number of copies and the price you paid.
• Payment confirmation details: the M-Pesa code, the number the payment came from, and the amount.

We never see your M-Pesa PIN, and we never hold card or bank details. The payment prompt is answered on your own handset, and only the confirmation comes back to us.

We do not buy personal data from anyone, and we do not build profiles of visitors. The site carries no advertising trackers and no third-party analytics.

Your photographs are the most personal thing you give us, so we treat them separately from everything else.

You keep them. Sharing an album with us does not transfer ownership or copyright of a single frame. It gives us permission to open that album, work from the pictures in it, and print the book you ordered — and nothing beyond that.

We commit to the following, and you may hold us to it:

• We do not sell your photographs, licence them, or share them with anyone outside the people making your book.
• We do not use your photographs to train artificial-intelligence models, our own or anyone else's.
• We do not use your photographs in marketing, on our website, or on social media unless you have given us specific written permission for that image.
• We delete our working copies thirty days after your book is delivered. After that the only copies are yours and the printed ones.

The album itself stays where you put it, on Google Photos, Google Drive or Apple iCloud. Those services hold it under their own privacy terms, not ours. You can revoke our access at any time by unsharing the link — if you do so before the book is printed, tell us, because we will not be able to finish the order.

Under the Data Protection Act, 2019 we must have a lawful basis for processing personal data. Ours are:

• Performance of a contract — your name, contact details, delivery town, order and payment confirmation. Without these there is no book and nowhere to send it.
• Your consent — opening your album and working from your photographs. You give this when you place the order, and you may withdraw it at any time.
• Legal obligation — we keep records of what was sold and what was paid, because tax and company law in Kenya require it.
• Legitimate interests — a limited amount of security and anti-fraud information, such as rate-limiting an address that is flooding our order form. We keep this narrow and short-lived.

We use a small number of suppliers to run the service. They act on our instructions and may not use your data for their own purposes.

• Lipr — payment processing. Receives the amount, your phone number and the order reference in order to raise the M-Pesa prompt.
• Safaricom — operates the M-Pesa rail the payment travels on, under its own terms.
• Resend — sends our order confirmations and studio notifications. Receives your email address and the contents of those messages.
• Vercel — hosts the website and runs the code behind it.
• Neon — hosts the database where orders are stored.
• Google and Apple — where your album lives, if you shared one. They are not our suppliers; you hold your own relationship with them.

We may also disclose information where the law requires it, or to establish or defend a legal claim. We will tell you if that happens unless we are prohibited from doing so.

Our website and database run on infrastructure located in the United States. That means your personal data is transferred outside Kenya.

We rely on your consent to that transfer, given when you place an order, and on contractual protections with our suppliers requiring them to keep the data secure and to process it only on our instructions. If you would rather your data were not transferred outside Kenya, we cannot currently take your order online — write to us and we will discuss the alternatives.

• Working copies of your photographs: deleted thirty days after delivery.
• Your order record, including what was made and what was paid: kept for five years, which is the period the Tax Procedures Act, 2015 requires us to be able to account for a sale.
• Order correspondence: kept while it is useful for supporting you, then deleted.
• Security and rate-limiting information: minutes or hours, not longer.

A retained order record is the commercial fact of the sale. It does not include your photographs.

Under the Data Protection Act, 2019 you have the right to:

• Be told what we hold about you, and be given a copy of it.
• Have inaccurate information corrected.
• Have your data deleted, where we are not required by law to keep it.
• Object to processing, or ask us to restrict it.
• Withdraw a consent you previously gave, including consent to use your photographs.
• Receive the data you gave us in a portable form.

Write to mykitoke@gmail.com and we will answer within the time the Act allows. We will not charge you for this, and we will not treat you differently for asking.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner in Kenya.

Kito sets no advertising cookies and runs no third-party analytics. There is nothing here that follows you to another website.

The only cookie we set is a sign-in session for our own studio staff, on the admin area of the site. Ordinary visitors and customers never receive it.

Your order and tracking pages are reached through a long random link rather than a login. Treat that link as private — anyone holding it can see the order it belongs to.

The site is served over HTTPS only. Payment credentials never touch our servers. Access to the order book requires a sign-in link sent to a studio address, and those links are single-use and short-lived.

No system is perfect. If a breach affects your personal data we will notify you and the Office of the Data Protection Commissioner as the Act requires.

Kito is sold to adults. We do not knowingly take orders from anyone under eighteen. Books frequently contain photographs of children — those are the parent's or guardian's to share, and by sharing them you confirm you are entitled to do so.

If we change how we handle personal data we will update this page and the date at the top of it. Where a change materially affects orders already placed, we will email the people affected rather than rely on you noticing.