Legal
Privacy Policy
Last updated: September 2026
This Privacy Policy explains how IBEX Advisory, a service of Ibex Ventures Co. Ltd (“IBEX Advisory,” “we,” “us,” or “our”), collects, uses, and protects personal information when you visit our website, submit an inquiry, or use the Client & Partner Portal.
This policy is drafted directly from how our systems are actually built and describes our current practices. It is not a substitute for legal advice, and we recommend it be reviewed by qualified counsel before being treated as a binding legal document.
1. Information We Collect
a) When you submit an inquiry (“Talk to Us” / Start the Conversation)
When you fill out our public inquiry form, we collect: your full name, executive title, institution or organisation name, institutional sector, email address, phone number (optional), your preferred engagement track (Anzisha, Bainisha, or Exploratory), and the message you provide describing your institutional challenge or inquiry.
b) When you create a Client & Partner Portal account
If you sign up for the Portal, we collect: your first and last name, username, email address, password (stored in encrypted/hashed form, never in plain text), phone number, and job title. If you are affiliated with an institution, we also associate your account with that institution.
c) Institution profile information
Administrators of an institution’s Portal account may provide institutional details such as the institution’s name, county, motto, student and staff counts, class levels, stream count, physical address, approximate location, and primary contact details.
d) Automatically collected information
When you sign in to the Portal, our systems automatically record your IP address and the date/time of sign-in, for security purposes such as detecting unauthorized access. Our public inquiry endpoint also uses IP-based rate limiting to guard against automated spam submissions — this is a security measure, not a tracking or profiling one.
e) Cookies and local storage
Our website does not use cookies for advertising or analytics tracking. We use your browser’s local storage only to remember your light/dark theme preference, which stays on your device and is never transmitted to us.
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiry and evaluate whether and how we can help your institution
- Provide, maintain, and secure your Client & Partner Portal account
- Communicate with you about your account or inquiry
- Detect and prevent spam, abuse, and unauthorized access
- Improve our services
3. How We Share Your Information
We do not sell your personal information. We share information only as necessary to operate our services:
- Email delivery — we use a transactional email provider (currently Resend) to send emails on our behalf, such as notifying our advisory team of a new inquiry or sending password-reset emails.
- Hosting infrastructure — our website is hosted on Vercel, and our backend application and database are hosted on Render (in Frankfurt, Germany). These providers process data on our behalf as infrastructure providers, not as independent users of your data.
- Legal requirements — we may disclose information if required to do so by law, or to protect the rights, property, or safety of IBEX Advisory, our clients, or others.
4. Data Retention
We retain inquiry and account information for as long as reasonably necessary to fulfil the purposes described in this policy, or as required by law. If you would like us to delete your information, contact us using the details below.
5. Your Rights
Depending on your location, you may have rights to access, correct, or request deletion of your personal information. To exercise these rights, contact us at the details below and we will respond as promptly as we can.
6. Security
We take reasonable steps to protect your information, including encrypting passwords, using token-based authentication for the Portal, and rate-limiting our public inquiry endpoint against automated abuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Children’s Privacy
Our services are intended for institutional leaders and administrators, not children. We do not knowingly collect personal information from children.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision.
9. Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact us:
IBEX Advisory (Ibex Ventures Co. Ltd)Alshons Plaza, Latema Rd, Nairobi, Kenya
P.O. Box 22443, Nairobi 00400
Phone: 0722 431 989
Email: contact@ibex.co.ke