Privacy Policy

1. Who we are

Alphabet Edd ("we", "us", "our") provides dedicated recruitment capacity to organisations hiring leadership, specialist and project talent across African markets.

For the purposes of applicable data protection law, Alphabet Edd is the data controller for personal information collected through this website and our hiring brief process. Our registered contact point for data protection matters is:

Alphabet Edd
Email: talent@alphabetedd.com

2. Information we collect

We collect personal information in the following ways:

2.1 Information you provide directly

When you submit a hiring brief or contact us, we collect:

• Your name and work email address
• Your phone or WhatsApp number, and your preference for WhatsApp contact
• Your organisation name and type
• Details of the roles you need to fill, including seniority, number of roles, and target countries
• Your hiring timeline and preferred package
• Any additional notes you choose to include (for example, budget context, languages required, or roles you have struggled to fill)
• Your consent to this Privacy Policy

2.2 Information collected automatically

When you visit our website, our hosting provider records standard server information, including your IP address, browser type, referring page and time of access. This information is used solely for security, debugging and abuse prevention. We do not use it to build a personal profile.

2.3 Information we do not collect

We do not collect special category data (such as health, ethnicity, religious belief, or political opinion), nor do we collect payment card details through this website.

3. How we use your information

We process your personal information for the following purposes:

• To review your hiring requirements and respond with a recommended approach and package
• To communicate with you about your enquiry by email, phone or WhatsApp (where you have consented to that channel)
• To deliver recruitment services if you engage us, including search, assessment, shortlisting and reporting
• To maintain business records as required for accounting, tax and legal compliance
• To improve our services by understanding the types of hiring enquiries we receive
• To protect against fraud and abuse of our systems

We do not sell your personal information. We do not share it with third parties for their own marketing purposes. We do not use your information for automated decision-making or profiling.

4. Legal bases for processing

Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Consent (Article 6(1)(a)) - for optional communications such as WhatsApp contact and marketing follow-up. You may withdraw consent at any time.
• Contract (Article 6(1)(b)) - where we are taking steps at your request before entering into a recruitment engagement, or performing one we have agreed.
• Legitimate interests (Article 6(1)(f)) - for responding to enquiries, protecting our systems, and understanding how our services are used. We balance these interests against your rights.
• Legal obligation (Article 6(1)(c)) - for retaining records required by tax, accounting or other applicable law.

Where the Kenya Data Protection Act, 2019 applies, we process personal data on equivalent grounds under sections 30 and 31 of that Act.

5. Sharing your information

We share personal information only where necessary and only with:

• Service providers who help us run our business - for example, our email provider, our web hosting provider, and any customer relationship management software we use. These providers are bound by contract to keep your information confidential and to use it only for the purposes we specify.
• Client-side decision makers - if you engage us for a recruitment engagement, we may share your name and contact details with the client who requested the search, but only after discussing the opportunity with you and obtaining your agreement.
• Professional advisers - accountants, auditors and lawyers, where necessary.
• Authorities - where we are legally required to do so, or where necessary to investigate suspected fraud or abuse.

6. International data transfers

Because we operate across multiple African markets and work with international clients and service providers, your personal information may be transferred to, and processed in, countries outside your own. Where we transfer personal information subject to GDPR to a country that has not received an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses. Where we transfer personal information subject to the Kenya Data Protection Act outside Kenya, we do so in accordance with sections 48 and 49 of that Act.

7. How long we keep your information

We retain personal information for as long as necessary for the purposes set out in this policy, and in accordance with the following schedule:

• Unsuccessful enquiries - up to 24 months from the date of last contact, so we can recognise a returning enquiry and avoid asking you to repeat information
• Enquiries that result in an engagement - for the duration of the engagement and for 7 years after, in line with standard business record-keeping requirements
• Security and abuse logs - up to 12 months

You may request earlier deletion at any time (see section 9).

8. How we protect your information

We take the following measures to protect your information:

• All form submissions are transmitted over HTTPS using TLS encryption
• Email is delivered over an encrypted SMTP connection
• Access to enquiry information is restricted to authorised personnel on a need-to-know basis
• Submissions are logged in systems with restricted administrative access
• We use server-side validation, CSRF protection, rate limiting and honeypot fields to prevent abuse of our forms

No system is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights or freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify you without undue delay.

9. Your rights

Subject to applicable law, you have the following rights:

• Right of access - to request a copy of the personal information we hold about you
• Right to rectification - to ask us to correct information that is inaccurate or incomplete
• Right to erasure - to ask us to delete your personal information where there is no compelling reason for us to keep it
• Right to restrict processing - to ask us to stop processing your information in certain circumstances
• Right to object - to object to processing based on legitimate interests, and to object to direct marketing at any time
• Right to data portability - to receive the information you provided in a structured, commonly used, machine-readable format
• Right to withdraw consent - where processing is based on your consent, you may withdraw it at any time
• Right to lodge a complaint - with your local supervisory authority. In Kenya, this is the Office of the Data Protection Commissioner (odpc.go.ke). In the EU/UK, this is your national data protection authority.

To exercise any of these rights, email talent@alphabetedd.com. We will respond within 30 days.

10. Cookies, local storage and analytics

This website uses only essential cookies required for it to function (a session cookie used to protect forms against cross-site request forgery), plus local storage to save your hiring brief draft as you type.

We do not use advertising cookies, third-party tracking pixels, or behavioural analytics that identify individual visitors. We use Google Search Console to monitor how our site appears in search results, but Google Search Console does not set cookies or collect personal data from visitors.

For full details of what we set, why, and how to control it, please see our Cookie Policy.

11. Children

Our services are intended for organisations and their authorised representatives. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material, we will provide a more prominent notice on the website or by email where we have your address.

13. Contact

If you have questions about this policy, or wish to exercise any of your rights, please contact:

Alphabet Edd
Email: talent@alphabetedd.com