Security & Data Protection Statement
Our approach to safeguarding systems and protecting the data entrusted to us.
Effective 6 September 2026
Security and data protection are central to how Zorvetska Limited designs, builds, and operates its products. This statement summarizes the measures we take to protect the confidentiality, integrity, and availability of the data entrusted to us.
1. Security Governance
We maintain a security program with defined ownership, policies, and periodic review. Security is considered throughout the software development lifecycle and in our operational practices.
2. Data Encryption
- Data in transit is protected using industry-standard encryption (TLS).
- Data at rest is protected using encryption where supported by our infrastructure.
3. Access Controls
Access to systems and data is granted on a least-privilege, need-to-know basis. We use authentication controls and monitor access to sensitive systems.
4. Infrastructure and Availability
Our services are hosted on reputable cloud infrastructure with resilience, backup, and monitoring capabilities designed to support availability and recovery.
5. Secure Development
We apply secure development practices, including code review and dependency management, to reduce the risk of vulnerabilities in our products.
6. Incident Response
We maintain processes to detect, respond to, and recover from security incidents. Where a personal data breach is likely to result in a risk to individuals, we will notify affected parties and relevant authorities as required by law.
7. Data Protection by Design
We embed data protection principles — including data minimization and purpose limitation — into the design of our products, consistent with our Privacy Policy and the Kenya Data Protection Act, 2019.
8. Contact
For security or data protection enquiries, contact [email protected].