Legal

Privacy Policy

This policy explains what personal data Limitless Software Solutions collects through this website, why we use it, who may process it on our behalf, and the choices available to you.

Last updated: 7 September 2026

1. Who we are

Limitless Software Solutions, trading as Limitless Softwares, is a business registered in Kenya with the Business Registration Service under registration number BN-AYSMPR9Y. Our principal business location is Nairobi, Kenya.

For privacy questions or requests, contact us at info@limitlesssolutions.co.ke or by telephone/WhatsApp on +254 798 489 573.

2. Scope of this policy

This policy applies to personal data collected through limitlesssolutions.co.ke, including information you submit through our technology assessment or contact forms and technical information generated when you use the site.

It does not govern a client's own systems or data that we process under a separate client contract. Where we act as a data processor for a client, the applicable client agreement and data-processing terms will govern that processing.

3. Personal data we collect

Depending on how you use the site, we may collect:

  • your name and work email address;
  • your telephone or WhatsApp number;
  • your company or organisation name;
  • the business problem, service requirement, budget range and preferred project timeline you provide;
  • records of communications with us;
  • your IP address and basic request information used for security, abuse prevention and rate limiting; and
  • a local browser preference used to remember light or dark display mode.

Please do not submit sensitive personal information, passwords, payment credentials, medical information, national identification numbers or other special-category data through our general enquiry form unless we specifically request it through an appropriate secure process.

4. Why we use personal data

We use personal data for specific business purposes, including to:

  • review and respond to an enquiry or technology assessment request;
  • prepare for a possible contract, quotation, discovery process or project discussion you have requested;
  • communicate with you about an active enquiry or client relationship;
  • protect the website and our systems from spam, abuse, fraud and security threats;
  • maintain business, accounting, contractual and legal records where required; and
  • send marketing communications only where permitted by applicable law and with an appropriate ability to opt out.

We rely on the lawful basis that best fits the relevant activity, which may include taking steps at your request before entering into a contract, performance of a contract, compliance with a legal obligation, our legitimate business and security interests, or consent where consent is required.

5. Whether providing information is mandatory

The assessment form identifies the information we need in order to meaningfully respond. Other fields are optional. If required information is not provided, we may be unable to assess or respond to your request.

6. Service providers and recipients

We use carefully selected service providers to operate the website and respond to enquiries. These providers may process limited personal data on our behalf where necessary to provide their services. They currently include:

  • DigitalOcean or our current hosting infrastructure provider, for hosting, network and server operations;
  • Resend, for delivery of assessment and contact-form emails; and
  • WhatsApp/Meta, if you choose to contact us through a WhatsApp link, in which case your use of that service is also subject to the provider's own terms and privacy practices.

We may also disclose information where reasonably necessary to professional advisers, regulators, law-enforcement bodies or other parties where disclosure is required or permitted by law. We do not sell personal data.

7. International data transfers

Some technology providers may process or store information outside Kenya. Where personal data is transferred outside Kenya, we will take reasonable steps to use safeguards required by applicable Kenyan data-protection law and to work with providers that maintain appropriate security and contractual protections.

8. How long we keep personal data

We retain personal data only for as long as it is reasonably needed for the purpose for which it was collected, subject to legal, contractual and record-keeping requirements.

  • General enquiries that do not become client engagements are normally retained for up to 24 months after the last meaningful contact, unless a shorter period is appropriate.
  • Client, contractual, invoicing and accounting records may be retained for longer where required for contract administration, tax, accounting, dispute-resolution or other legal obligations.
  • Security and infrastructure logs are retained for limited operational periods determined by our security needs and hosting arrangements.
  • Your display-theme preference remains in your browser until you change it, clear browser storage or remove site data.

9. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or misuse. These measures include access controls, encrypted connections, validation of submitted data, rate limiting and controlled use of service providers. No internet service can guarantee absolute security.

10. Cookies and local browser storage

At the date of this policy, this website does not intentionally set advertising or behavioural-analytics cookies. The site uses local browser storage to remember your light or dark theme preference. Essential hosting infrastructure may also generate technical logs necessary to operate and secure the site.

If we introduce non-essential analytics, advertising or similar tracking technologies in future, we will update this notice and implement any consent or preference controls required by applicable law.

11. Your rights

Subject to applicable law and lawful exceptions, you may have rights to be informed about the use of your personal data, request access to data we hold about you, object to certain processing, request correction of inaccurate information and request deletion of information that is false or misleading. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.

To exercise a privacy right, email info@limitlesssolutions.co.ke. We may need to verify your identity before completing a request.

12. Marketing communications

Submitting a technology assessment does not automatically subscribe you to marketing. Where we send permitted marketing communications, we will provide a practical way to opt out. An opt-out request will not prevent service or project communications that are still necessary for an active enquiry or contract.

13. Children

This website is intended for business users and is not directed to children. We do not knowingly use the general enquiry form to collect personal data from children for marketing purposes.

14. Complaints

We encourage you to contact us first if you believe we have handled your personal data improperly. You may also have the right to raise a complaint with Kenya's Office of the Data Protection Commissioner (ODPC).

15. Changes to this policy

We may update this policy when our services, service providers or legal obligations change. The current version will be published on this page with its last-updated date.