1. Our Commitment to Privacy

At Inbox Outreach Company (“we,” “our,” “us”), protecting your privacy is central to how we run our outreach and email marketing campaigns.

We are bound by Article 31 of the Constitution of Kenya, which guarantees the right to privacy, and the Kenya Data Protection Act, 2019 (DPA). We only collect, use, and share personal data in lawful, fair, and transparent ways.

This policy explains how we handle personal information when carrying out email marketing, prospect outreach, list building, and campaign execution.

2. Data We Collect

In the course of operating email campaigns and outreach, we may collect:

• Identification & Contact Data: name, email address, company, job title, phone number (if shared)

   

• Professional Information: role, department, organization type, industry

   

• Engagement Data: open rates, clicks, replies, unsubscribe requests, preferences

   

• Lead Sources: publicly available business data, event registrations, sign-ups, referrals, or information shared with us by clients

   

We do not knowingly collect sensitive personal data (e.g. health, religion, ethnicity) for outreach.

3. How We Use Personal Data

We process personal data strictly for legitimate outreach and marketing purposes:

• Sending business-to-business (B2B) emails introducing relevant services or solutions

   

• Managing campaigns on behalf of clients (strategy, execution, tracking)

   

• List building and enrichment for targeted, relevant outreach

   

• Tracking email performance (open rates, clicks, responses)

   

• Ensuring compliance with opt-out/unsubscribe requests

   

• Responding to inquiries or support requests

   

We do not sell or misuse personal information outside of these stated purposes.

4. Lawful Basis for Processing

Our processing is based on:

• Consent: where you opt in to receive our or our client’s marketing messages

   

• Legitimate Interests: sending B2B messages about services that may reasonably be of interest, while respecting your right to object at any time

   

• Contract: when processing is necessary to perform our agreements with clients

   

• Legal Obligations: compliance with the DPA and other applicable laws

   

5. Your Rights Under Kenyan Law

As a data subject, you have the right to:

• Access: ask if we hold your data and receive a copy

   

• Correction: update or correct inaccurate details

   

• Erasure: request deletion of your personal data when it’s no longer needed

   

• Opt Out: unsubscribe from email marketing at any time (all campaigns include a one-click unsubscribe link)

   

• Object: refuse use of your data for direct marketing — and we will honor that immediately

   

• Complain: raise a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data rights have been violated

   

We will respond to all requests within 14 days as required under the DPA.

6. Sharing of Data

We may share data with:

• Email marketing platforms (e.g. Instantly, Apollo, Clay, Maildoso) used to run outreach campaigns

   

• Analytics and tracking providers for campaign performance

   

• Clients, when we run outreach on their behalf (under strict contracts and limited to relevant data)

   

We never sell your personal data. Any sharing is done under confidentiality and security agreements.

7. Data Storage & Transfers

• Data is stored securely on servers located in Kenya and, where necessary, in other countries that offer adequate data protection safeguards.

   

• If data leaves Kenya, we ensure compliance with the DPA by putting appropriate safeguards in place.

   

• We retain personal data only as long as necessary for outreach campaigns, or to meet legal requirements. Once expired, data is deleted or anonymized.

   

8. Security Measures

We implement technical and organizational safeguards to protect data:

• Encrypted storage and secure servers

   

• Restricted employee access (only those who need it)

   

• Regular audits of our outreach systems

   

• Data breach response plan — if a breach occurs, we notify both the ODPC and affected individuals in line with Kenyan law

   

9. Cookies & Tracking

If we operate landing pages or email tracking pixels, we will:

• Use them strictly for campaign performance analytics (open/click rates, engagement)

   

• Provide transparency on their use

   

• Allow you to disable or opt out if you prefer

   

10. Children’s Data

We do not target or knowingly process data of individuals under 18 years of age. If such data is collected in error, we will delete it promptly.

11. Contact Us

If you have questions, concerns, or wish to exercise your data rights, please contact:

Inbox Outreach Company
Email: [Menelik@inboxoutreachcompany.com]
Phone: +254 757682799
Address: Westlands, Muthangari Drive.

If you are not satisfied with our response, you may escalate to:

Office of the Data Protection Commissioner (ODPC), Kenya
Britam Towers, Upper Hill, Nairobi
Email: info@odpc.go.ke
Website: www.odpc.go.ke

12. Updates to this Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top will reflect the changes. Significant updates will be communicated directly to you where appropriate.