Privacy Policy.

01Who we are

Precision Drones Limited ("Precision Drones", "we", "us") is the data controller for personal data described in this policy. We are registered in Kenya, company number [company registration number], and registered with the Office of the Data Protection Commissioner as a data controller and processor, registration number [ODPC registration number].

Data protection questions can be sent to info@precisiondrones.africa or by post at Manga House, Kiambere Road, Upper Hill, Nairobi, Kenya.

02What we collect

We collect personal data in the following ways:

• Quote and contact requests. Your name, email address, phone or WhatsApp number, the service you need, and anything you tell us about the location, area and timeline of the work.
• Clients and contracts. Names, roles and contact details of people at client organisations, site addresses and coordinates, invoicing details, and records of the missions we fly for you.
• Academy participants. Your name, contact details, KCAA Remote Pilot Licence number and expiry, employer if a corporate cohort, attendance, assessment results and certificates issued.
• Job applicants. Your CV and anything else you choose to send us.
• The website itself. Our hosting provider keeps standard server logs (IP address, browser type, pages requested, time) for security and to keep the site running. We do not run analytics or advertising tags.

03How we use it and why

We use personal data only for the purposes below, each with a lawful basis under section 30 of the Data Protection Act:

• Responding to your request and preparing a quote, because you asked us to (steps before entering a contract).
• Planning and flying missions, processing data and delivering results, to perform our contract with you.
• Running Academy programmes and issuing certificates, to perform our contract with you and to meet KCAA training record requirements.
• Flight safety, regulatory reporting and record keeping, to comply with the Civil Aviation (Unmanned Aircraft Systems) Regulations, 2020 and other legal obligations.
• Keeping the website secure, in our legitimate interest in protecting our systems.
• Sending occasional updates about our services, only if you have said yes. You can say no at any time.

04Who we share it with

We share personal data only where we need to:

• Service providers who host the server that runs this website and receives its forms, provide email, file storage and our data platform, under written agreements that require them to protect it.
• Regulators and authorities, including the Kenya Civil Aviation Authority, where the law requires us to.
• DJI, only for Academy participants receiving a DJI training credential, and only the details needed to issue it.
• Professional advisers such as auditors and lawyers, under duties of confidentiality.

We never sell personal data.

05Transfers outside Kenya

Some of our service providers store data outside Kenya, for example our website host [VPS provider and the country its server is in]. Where that happens we rely on the safeguards in sections 48 to 50 of the Data Protection Act, including contractual protections, and we transfer only what is needed.

06How long we keep it

• Quote requests that do not lead to work: 24 months, then deleted.
• Client and mission records: for the length of the contract plus 7 years, to meet tax, aviation and contractual record-keeping duties.
• Academy records: 7 years after completion, so we can verify certificates.
• Job applications: 12 months, unless you join us.
• Server logs: no longer than 90 days.

07How we protect it

Our information security practices are certified to ICTA 1. Access to personal data is limited to staff who need it, protected by strong authentication, and logged. Data is encrypted in transit and at rest on our platforms. If a breach puts your rights at risk, we will notify the Data Commissioner within 72 hours and tell you without delay, as the Act requires.

08Your rights

Under the Data Protection Act you have the right to:

• be told how your data is used, which is what this policy is for;
• see the personal data we hold about you;
• have inaccurate data corrected;
• have data deleted where we no longer have a reason to keep it;
• object to processing, including for direct marketing;
• receive your data in a portable format.

Write to info@precisiondrones.africa. We will reply within 30 days and may ask you to confirm your identity first. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.

09Children

Our services are for businesses, institutions and licensed adult pilots. We do not knowingly collect data from anyone under 18.

10Changes to this policy

When we change this policy we will update the date at the top of this page. If a change materially affects how we use your data, we will tell clients and Academy participants directly.