Privacy Policy | ComonHQ

1. Who We Are

ComonHQ ("we", "us", "our") is operated by Collins Omondi, based in Nairobi, Kenya. This Privacy Policy explains how we collect, use, and safeguard information when you visit comonhq.com or use our contact form.

For privacy-related enquiries, contact us at [email protected].

2. Data We Collect

2.1 Contact Form

When you submit our contact form we collect:

Name — to address you in our reply
Email address — to respond to your enquiry
Company (optional) — for context
Message — the content of your enquiry

This data is transmitted via Resend (resend.com) to our inbox and is not stored in any database. It is used solely to respond to your message and is retained only as long as necessary.

2.2 Analytics & Tracking

We use the following third-party services that may collect data automatically when you visit the site:

Google Analytics 4 (GA4)

We use Google Analytics to understand how visitors use our site. GA4 collects anonymised usage data including pages visited, session duration, and device/browser type. Google may transfer this data to servers in the United States. You can opt out via the Google Analytics Opt-out Browser Add-on.

Microsoft Clarity

We use Microsoft Clarity for session recording and heatmaps. Clarity may record mouse movements, clicks, and scrolling behaviour to help us improve the user experience. Personally identifiable information is automatically masked. See Microsoft's Privacy Statement.

Vercel Analytics

Our hosting provider Vercel collects anonymised, privacy-friendly analytics (page views, Web Vitals). No cookies are used and no personal data is shared. See Vercel's Analytics Privacy Policy.

Google AdSense

We participate in the Google AdSense programme. Google may use cookies to serve ads based on your prior visits to our site or other sites. You can opt out of personalised advertising via Google Ads Settings.

3. Cookies

We do not set first-party cookies directly. However, third-party services listed above (Google Analytics, Microsoft Clarity, Google AdSense) may set cookies on your device. You can control cookie preferences through your browser settings or the opt-out links provided above.

4. Legal Basis for Processing

We process personal data on the following bases:

Legitimate interests — analytics and site performance improvement
Contract performance — responding to contact form enquiries
Consent — where required by applicable law for cookies and tracking

5. Data Sharing

We do not sell or rent your personal data. Data may be shared with the third-party processors listed in Section 2 solely to provide the services described. Each processor has its own privacy policy and data protection obligations.

6. Data Retention

Contact form submissions are retained only in our email inbox and deleted when no longer needed. Analytics data is retained according to each provider's default retention settings (GA4: 14 months, Clarity: 13 months).

7. Your Rights

Depending on your location, you may have rights under the GDPR, Kenya's Data Protection Act 2019, or other applicable law, including:

The right to access your personal data
The right to correct inaccurate data
The right to erasure ("right to be forgotten")
The right to restrict or object to processing
The right to data portability

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

Our site is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page indicates when it was last revised. Continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact

For any questions about this Privacy Policy or our data practices, please email [email protected].