Legal & Compliance/ODPC Registered

ChangeLens Africa: Privacy Policy

Last updated: 12 Sep 2026•Effective: 2 Feb 2026

ChangeLens Africa Limited (“ChangeLens,” “we,” “us”) respects your privacy. This policy explains what personal data we collect, why, and the rights you have over it, in line with Kenya’s Data Protection Act 2019, ODPC regulations, and the EU GDPR where applicable.

Who We Are

ChangeLens Africa Limited is registered with the Office of the Data Protection Commissioner, Kenya as a Data Controller (Registration: 344-149E-0AEA, Certificate Serial No. 18548). This policy covers changelens.africa and our MSME Enablement Tools, Luvon Q and mylens.ai, both operated by ChangeLens Africa Limited.

What We Collect

  • Website visitors: name, email, phone, company, role, and any message or file submitted through our forms.
  • Job applicants: name, contact details, CV and cover letter.
  • Luvon Q and mylens.ai users: message content and basic metadata exchanged with a business client using our tools.
  • Automatically: standard technical data such as IP address, browser type, and cookies.

Why We Use It

To respond to enquiries, assess job applications, deliver our MSME tools on our clients' behalf, meet legal obligations, and improve our website. Our basis is your consent, a contract in place, or our legitimate interest in running our services responsibly.

Our MSME Enablement Tools

Luvon Q is built and run directly by ChangeLens. We process end-user messages via the WhatsApp Business API on behalf of our business clients, acting as a data processor for that data.

mylens.ai is developed by a third-party technology partner and made available to our SME clients under a white-label agreement. Your data may be processed on that partner’s infrastructure as well as by ChangeLens. We hold our partners to appropriate data protection standards and can share more detail on request.

Who We Share It With

We do not sell personal data. We may share it with trusted service providers (hosting, IT, WhatsApp Business API), our mylens.ai technology partner, the business clients you interact with through our tools, and authorities where legally required. Any transfer outside Kenya is only made with adequate protection or proper safeguards in place.

How Long We Keep It

Only as long as needed for the purpose collected, typically for the length of a client relationship plus a reasonable period for legal or accounting needs, after which it is securely deleted or anonymized.

Cookies

Essential cookies keep our site working. Analytics or other non-essential cookies are only set with your consent, which you can manage anytime via your browser or our cookie banner.

Your Rights

You can access, correct, or request deletion of your data, object to or restrict its use, request a portable copy, and withdraw consent at any time. Contact us below to exercise any of these.

Complaints

You can raise concerns with the Office of the Data Protection Commissioner, Kenya (odpc.go.ke) or, if you're in the EU/EEA, your local supervisory authority.

Security

We use reasonable technical and organizational measures, including encryption in transit, to keep your data safe.

Changes To This Policy

We may update this policy occasionally. The date at the top shows the latest revision.

Contact Us

ChangeLens Africa Limited

3rd Floor, The Promenade, General Mathenge Road, Spring Valley, Westlands, Nairobi, Kenya

programmes@changelens.africa

+254 701 889 930

ODPC Registration: 344-149E-0AEA (Data Controller, Certificate Serial No. 18548)