Privacy notice
How we look after your personal data, written for the Kenya Data Protection Act, 2019. Last updated October 2026.
Who we are
TMK Studios, Tulip Tower, 2nd Floor, Mpaka Road, Westlands, Nairobi, is the data controller for the personal data described here. You can reach us at tmkstudios254@gmail.com or +254 111 502 447.
What we collect
- Contact details you give us: your name, phone number and email address.
- Booking details: the session, date, time, number of people and any notes you add.
- Messages you send through our website chat, email or WhatsApp.
- Photos and video taken during your session, and the favourites you pick in your private gallery.
- Basic website statistics such as which pages are viewed. We do not use advertising cookies or sell your data.
Why we use it
We use your data to reply to you, manage your booking, take and deliver your photos, keep proper business records and improve our website. We rely on your consent, on the need to perform our agreement with you, and on our legal obligations.
Your photos
Session photos are shared with you through a private, password protected gallery that expires. We only use your images in our portfolio or on social media with your clear permission, which you can withdraw at any time. For anyone under 18, we need permission from a parent or guardian.
Who we share it with
We use trusted service providers to run this website and send email: Netlify for hosting and data storage, Resend for email delivery and Google for website fonts. Some of these providers store data outside Kenya. We only use providers that protect personal data to a standard consistent with the Act. We never sell your personal data.
How long we keep it
We keep enquiries for up to 12 months, booking records for up to 7 years for tax purposes, and private galleries until their expiry date. You can ask us to delete your data sooner, unless the law requires us to keep it.
Your rights
Under the Data Protection Act, 2019 you have the right to be told how your data is used, to access it, to correct it, to have it deleted, to object to its use, and to receive a copy in a common format. To use any of these rights, contact us and we will respond within the time the law allows.
Complaints
If you are unhappy with how we handle your data, please talk to us first. You can also complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.