Tiskos Creators Limited
Published Update: January 17, 2026
Introduction
Tiskos Creators Limited (“we”, “us”, “our”, “Tiskos”) is a private limited company incorporated in Kenya with registered office at 3rd Floor, The Promenade, Westlands, Nairobi, Kenya.
We are committed to protecting your privacy and handling your personal data responsibly in compliance with the Data Protection Act, 2019 (as amended), the Data Protection (General) Regulations, 2021, and other applicable Kenyan laws (“DPA”). This Privacy Policy explains how we collect, use, store, share, and protect personal data when you:
– Visit our website (https://tiskos.com or related sites/apps),
– Engage our creative services (branding, design, content creation, digital media, etc.),
– Contact us, submit inquiries, feedback, or materials,
– Interact with our social media/portfolio.
By using our website, services, or providing personal data, you consent to the practices described here. If you do not agree, please do not provide your data or use our services.
Personal Data We Collect
We may collect the following personal data:
– Contact and identification information: name, email address, phone number, physical address, national ID (where required for contracts).
– Business/Professional information: company name, job title, industry.
– Project-related data: branding materials, logos, photos, videos, content, feedback, preferences you provide for projects.
– Technical/Usage data: IP address, browser type, device info, cookies, analytics data (e.g., via Google Analytics), pages visited, time spent.
– Payment-related data: bank details or payment references (processed securely via third-party providers; we do not store full card details).
– Marketing/Communication data: preferences for newsletters or updates.
We collect data directly from you (forms, emails, proposals), automatically (cookies, logs), or from third parties (e.g., referrals).
How We Use Your Personal Data
We process personal data for lawful purposes, including:
– Providing and managing creative services (contract performance).
– Communicating with you (inquiries, proposals, project updates).
– Improving our website/services (analytics, user experience).
– Marketing our services (with your consent).
– Complying with legal obligations (e.g., tax, contracts).
– Showcasing work in our portfolio (with your consent or anonymized where possible).
We rely on lawful bases under the DPA: consent, contract necessity, legitimate interests (e.g., service improvement), legal obligations.
Sharing Your Personal Data
We share data only when necessary:
– With service providers (e.g., hosting, email, analytics like Google — subject to DPA-compliant agreements).
– With clients/partners for project delivery.
– To comply with law, court orders, or protect rights.
– In business transfers (e.g., merger).
We do not sell personal data.
Cross-Border Transfers
If data is transferred outside Kenya (e.g., to cloud providers), we ensure adequate safeguards (e.g., standard contractual clauses, adequacy decisions, or your explicit consent) as required by Section 48 of the DPA and General Regulations.
Data Security
We implement reasonable technical and organizational measures (encryption, access controls, firewalls, regular reviews) to protect data from unauthorized access, loss, or breach. However, no system is 100% secure.
Data Retention
We retain personal data only as long as necessary for the purpose (e.g., project duration + 7 years for legal/contract reasons) or as required by law. After that, we securely delete or anonymize it.
Your Data Subject Rights
Under the DPA, you have the right to:
– Access your personal data.
– Rectify inaccurate/incomplete data.
– Erase data (right to be forgotten, where applicable).
– Restrict processing.
– Object to processing (e.g., for marketing).
– Data portability.
– Not be subject to automated decisions with legal effects.
– Withdraw consent (where processing is consent-based) — this does not affect prior lawfulness.
To exercise rights, contact us (details below). We respond within 14 days (extendable). No fee unless manifestly unfounded/excessive.
Cookies and Tracking
Our website uses cookies (essential, analytics, marketing). You can manage preferences via our cookie banner. For details, see our Cookie Policy [link if separate].
Data Breaches
In case of a breach likely to result in high risk to your rights, we notify you and the ODPC promptly (within 72 hours where required).
Children’s Privacy
Our services/website are not directed at children under 18. We do not knowingly collect data from minors without parental consent.
Changes to This Policy
We may update this Policy. Changes are posted here with updated date. Continued use constitutes acceptance.
Complaints
If unsatisfied with our response, contact the Office of the Data Protection Commissioner (ODPC) at complaints@odpc.go.ke or via https://www.odpc.go.ke/.
Contact Us / Data Protection Contact
For questions, rights requests, or concerns:
Email: info@tiskos.com
Phone: +254 790 826 417 / +254 701 980 075
Address: 3rd Floor, The Promenade, Westlands, Nairobi, Kenya
We may appoint a Data Protection Officer; contact us for details.
Thank you for trusting Tiskos Creators Limited with your data.