1. Introduction
Metricelle Insights ("we", "us" or "our") provides the services described on this website. Metricelle is a management-analytics company that combines data preparation, dashboards, forecasting, reporting automation and decision support. Its work starts from the questions managers need to answer and the actions that indicators should trigger. This Privacy & Cookie Policy explains how we collect, use, disclose, retain and protect personal data when you visit metricelleinsights.com, contact or contract with us, use services we provide directly, or interact with systems we operate for clients. A service-, client- or partner-specific notice may add information and takes priority for that processing if it conflicts with this policy.
2. Company and Privacy Contact Details
Company: Metricelle Insights
Headquarters: Nairobi, Kenya
Website: https://metricelleinsights.com
Privacy email: privacy@metricelleinsights.com
3. Our Role in Data Processing
Metricelle Insights is generally the controller for its own website, business administration and services offered directly. When it handles personal data solely under a client's documented instructions, the client is normally the controller and Metricelle Insights acts as processor or service provider. If we process data for a client, requests about that data should normally be directed to the client. We assist the client as required by contract and applicable law.
4. Personal Data We Collect
Depending on the service and your relationship with us, we may collect: business contact and relationship data; contracts, correspondence and billing records; client and user identities; datasets supplied or controlled by clients; dashboard usage, forecasting inputs, reports, access records and platform diagnostics; website and technical data such as IP address, browser and device details, pages viewed, referral source, approximate location derived from IP, cookie choices, timestamps and security logs; and information you choose to provide in enquiries, applications, surveys or support requests. Please do not provide sensitive or unnecessary data. We process sensitive data only where genuinely required, lawful and subject to appropriate safeguards.
5. How We Collect Personal Data
We collect data directly from you; from your employer, client, authorised administrator, operational partner or service user; automatically from authorised websites, applications, devices, integrations and security systems; from providers involved in an authorised service or transaction; and from public or licensed sources where lawful and relevant to due diligence, research or service delivery.
6. Why We Process Personal Data
We process personal data to prepare data; deliver dashboards, forecasts, reporting automation and decision support; administer authorised users; measure service performance; maintain security; respond to enquiries and prepare proposals; contract with clients and manage suppliers; protect people, information and systems; prevent fraud and misuse; comply with law; resolve disputes; and maintain required records. We do not sell personal data for money and do not use client-controlled data for our unrelated advertising.
7. Legal Bases
Where Kenya's Data Protection Act 2019 and its implementing regulations, together with other applicable Kenyan laws require a legal basis, we rely as appropriate on performance of a contract or pre-contract steps; compliance with legal obligations; consent; protection of vital interests in a genuine emergency; and legitimate interests such as delivering and improving services, securing systems, administering the business and communicating with business contacts, balanced against individual rights. Where local law uses different terminology, we process data only for purposes and on grounds permitted by that law. Consent may be withdrawn without affecting earlier lawful processing.
9. International Transfers
Our clients, users, suppliers and infrastructure may be in different countries. Where transfer restrictions apply, we use a lawful mechanism appropriate to the relevant jurisdiction, such as an adequacy decision, approved contractual clauses, binding commitments, consent where permitted, or another recognised safeguard, together with supplementary protections where appropriate.
10. Retention
We retain personal data only as long as needed for the purpose collected, considering contract duration, client instructions, account activity, security and backup cycles, dispute periods and legal, tax, audit or regulatory duties. Website enquiries and unsuccessful proposals are generally retained for up to 24 months after the last substantive contact. Client, supplier, transaction and accounting records are retained for the engagement and applicable statutory period. Client-controlled service data follows the contract, secure backup rotation and legal holds. Security logs are kept for a proportionate risk-based period unless required for an investigation or claim.
11. Security
We use proportionate technical and organisational safeguards, which may include role-based access, authentication, encryption where appropriate, logging and monitoring, secure change processes, vulnerability and incident management, backup and recovery controls, confidentiality duties and supplier review. No system is completely secure, but safeguards are reviewed against the risks and service needs.
12. Your Privacy Rights
Subject to applicable law, you may have rights to access, correct, delete or restrict personal data; object to certain processing or direct marketing; request portability; withdraw consent; change cookie choices; appeal a refusal where local law permits; and lodge a complaint. Contact privacy@metricelleinsights.com. We may verify identity and authority. If a client controls the data, contact that client first. You may also complain to the Office of the Data Protection Commissioner of Kenya: odpc.go.ke.
14. Direct Marketing
We may send relevant business communications where permitted by law. You can opt out through the message or by contacting us. Service, security and transaction messages are not marketing and may still be sent when necessary.
15. Children
Our website and business services are not directed to children unless a specific service notice states otherwise. We do not knowingly collect a child's personal data in breach of applicable age-verification or parental-consent requirements. A parent or guardian may contact us about a child's data. We do not use children's personal data for targeted advertising.
16. Changes to This Policy
We may update this policy when our services, technology, law or processing change. The latest version will be published on metricelleinsights.com with its revision date, and material changes will be communicated by an additional appropriate method where required.
17. Contact Us
Questions, complaints or privacy requests may be sent to privacy@metricelleinsights.com or addressed to Metricelle Insights, Nairobi, Kenya.