Privacy Policy

We only collect information you give us, plus the minimum technical data needed to run the site securely.

• Booking requests: your name, organisation, email, phone, and the event details you supply.
• Orders: your name, email, phone and — for physical books — a delivery address.
• Contact form and newsletter: your name and email address.
• Technical: IP address and browser user-agent, kept for security, rate limiting and fraud prevention.

Booking details are used to assess and arrange an engagement. Order details are used to take payment and deliver what you bought. Contact details are used to reply to you.

We do not build advertising profiles and we do not sell or rent your information to anyone.

Payments are handled by our payment providers — M-PESA (Safaricom Daraja) and PesaPal. Card and mobile-money credentials are entered with the provider, never on this site, and we never store them.

We keep a record of the payment reference, amount, status and a masked payer reference so we can support your order.

If website analytics are enabled, they are configured to anonymise IP addresses and we track conversion events (such as a completed purchase) rather than individual people.

Transactional emails — booking confirmations, receipts and download links — are sent because you asked us to do something. Newsletter email requires a double opt-in: you confirm by clicking a link, and every newsletter can be unsubscribed from at any time.

eBook files are stored privately and are never publicly reachable. Access is granted through a personal, expiring, download-limited link that is tied to your order. We log download attempts to protect the work from redistribution.

Booking and order records are kept for as long as we need them for business and tax purposes. Newsletter subscriptions are kept until you unsubscribe. Security logs are kept for a short period and then discarded.

You can ask us what we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Write to the address below and we will respond.

The site is served over HTTPS. Passwords are hashed. Administrative access is restricted by role and every privileged action is written to an audit log.