Privacy
Privacy Notice
Last updated: 31 October 2026
This notice explains how xzerojr handles information submitted through the project inquiry and booking forms on this website.
Who is responsible
xzerojr is responsible for the personal information described in this notice. For privacy questions or requests, email mohamed@xzerojr.com.
Information we collect
When you submit a project inquiry or booking request, we collect the name, email address, service interest and, for bookings, preferred date that you provide. Cloudflare processes technical request data to deliver and protect the site. Our intake functions use a SHA-256 digest of the client IP address for abuse prevention and rate limiting; Cloudflare Turnstile receives the challenge response and may receive the IP address for verification.
How we use information
We use inquiry and booking information to respond to you, arrange the requested consultation, prevent spam and abuse, protect the site, and maintain records needed to manage the request. The project inquiry form is not a newsletter signup. We do not use its submissions for marketing. Any future marketing messages would require a separate opt-in.
Legal grounds
We process information to take steps you request before entering a service agreement, to perform an agreement where one exists, and for our legitimate interests in operating the site and preventing abuse. We rely on consent where the law requires it, including for any optional marketing you separately choose to receive.
Service providers and transfers
We use Cloudflare for site hosting, Pages Functions, D1 storage and Turnstile security checks. We use Resend to send inquiry and booking notifications to xzerojr. These providers may process information outside Kenya. We will use providers and transfer safeguards that meet applicable data protection requirements, and limit provider access to what is needed for these services.
How long we keep information
Project inquiries and booking requests are scheduled for deletion or anonymization 12 months after submission, unless we need them longer to provide an active service, resolve a dispute, or meet a legal obligation. Rate-limit records containing hashed IP addresses are used only for the 24-hour abuse limit and purged by the scheduled cleanup. Hashed IP values are pseudonymous security data and are not used to identify you.
Your choices and rights
You may contact us to ask about information we hold about you, request access or correction, object to processing, or request deletion, subject to applicable law. You can also complain to the Office of the Data Protection Commissioner in Kenya. Contact mohamed@xzerojr.com to make a request.
Security and technical services
We use access controls, input validation, rate limits, bot checks and encrypted service connections to protect submissions. No online service can promise perfect security. Cloudflare Turnstile and, if enabled in our Cloudflare account, Cloudflare Web Analytics may process technical information under their own service terms. We will update this notice if our use of analytics or other services changes materially.
For privacy requests, email mohamed@xzerojr.com.