Privacy Policy

1. Introduction

htechnologies ("we," "our," or "us"), formerly known as CyberTech Hexperts Solutions, operates the website at https://htechnologies.co.ke and provides professional IT infrastructure support, computer diagnostics, software engineering, and technical consulting based in Busia, Kenya. This Privacy Policy details our practices concerning the collection, storage, use, and protection of personal data and technical records.

2. Information We Collect

We only collect information directly necessary to provide technical services, respond to support inquiries, and fulfill contractual agreements:

• Contact Inquiries: When you submit a request through our inquiry desk, we collect your name, email address, chosen service category, and inquiry description.
• Service Records: During on-site diagnostics or computer repairs at our Busia workshop, we record hardware serial numbers, component specifications, and customer diagnostic notes.
• Authentication Data: For clients accessing portal features, credentials are processed securely through Firebase Authentication with encrypted tokens.
• Local Storage and Offline Cache: When offline, inquiry forms are temporarily stored on your local device (browser LocalStorage) and synchronized once network connectivity resumes.

3. How We Use Collected Information

Information gathered is used strictly for operational purposes:

• Diagnosing, repairing, and verifying customer computing equipment.
• Developing, deploying, and maintaining production software platforms.
• Responding to customer support tickets and dispatching quotations.
• Processing M-Pesa transaction confirmations for completed services.
• Ensuring compliance with Kenyan cybersecurity standards and preventing unauthorized data access.

4. Data Storage and Security Measures

We enforce strict organizational and technical safeguards:

• No SQL or Database Injection: All database operations utilize parameterized queries to prevent injection vulnerabilities.
• Broken Access Control Defense: Cloud document requests verify client identity ownership before granting file access.
• Administrative Credential Protection: Administrative service keys reside solely on secure servers and are never exposed to public client bundles.
• Hard Disk Intake Policy: Customer storage media admitted for operating system maintenance is protected by strict isolation procedures to prevent data loss or leakage.

5. Third-Party Service Providers

We do not sell, rent, or lease personal information to any third parties. We may interface with reputable infrastructure providers strictly for technical delivery:

• Safaricom Daraja API: Used for secure M-Pesa payment validation. Payment processing complies with Safaricom and Central Bank of Kenya guidelines.
• Google Cloud / Firebase: Used for secure document repository authentication and database rule enforcement.
• Cloudflare / Edge CDN: Used for DNS routing, caching, and network DDoS mitigation.

6. Your Rights

In accordance with the Kenya Data Protection Act, you have the right to request access to your personal service records, request correction of inaccurate data, or request deletion of contact records upon completion of warranty periods. To exercise these rights, contact us directly.

7. Contact Information

For any privacy inquiries, data requests, or technical questions regarding this policy, contact: