Privacy Policy

Effective Date: August 2026
Last Updated: August 2026

4Life Solutions (“4Life Solutions”, “we”, “us” or “our”) is committed to respecting and protecting your privacy and handling personal data responsibly, lawfully and transparently.

This Privacy Policy explains how we collect, use, store, disclose, transfer and protect personal data when you visit https://4lifesolutions.com, communicate with us, submit an enquiry, request information about our products or programmes, or otherwise interact with us through our website.

This Privacy Policy has been prepared in accordance with applicable Kenyan data protection law, including:

• Article 31 of the Constitution of Kenya, 2010;

• The Data Protection Act, 2019;

• The Data Protection (General) Regulations, 2021;

• The Data Protection (Registration of Data Controllers and Data Processors) Regulations, 2021; and

• Other applicable regulations, guidance and requirements issued by the Office of the Data Protection Commissioner (ODPC).

1. Who We Are

4Life Solutions develops and promotes solutions intended to improve access to safe drinking water and works with communities, NGOs, humanitarian organisations, development partners, governments, institutions, businesses, distributors and other stakeholders.

Our website is:

https://4lifesolutions.com

For purposes of applicable data protection legislation, the relevant 4Life Solutions entity responsible for determining the purposes and means of processing personal data acts as the data controller.

Where 4Life Solutions processes personal data solely on the instructions of another organisation, we may act as a data processor.

2. Our Data Protection Principles

When processing personal data, 4Life Solutions seeks to comply with the principles established under the Data Protection Act, 2019.

We therefore endeavour to ensure that personal data is:

• Processed in accordance with the right to privacy;

• Processed lawfully, fairly and transparently;

• Collected for explicit, specified and legitimate purposes;

• Not further processed in a manner incompatible with those purposes;

• Adequate, relevant and limited to what is necessary for the intended purpose;

• Accurate and, where necessary, kept up to date;

• Retained in identifiable form only for as long as reasonably necessary;

• Protected against unauthorised or unlawful processing, loss, destruction or damage; and

• Transferred outside Kenya only where the requirements of applicable data protection law have been satisfied.

We apply these principles throughout the lifecycle of personal data, from collection through use, storage, sharing and eventual deletion or anonymisation.

3. Personal Data We May Collect

The information we collect depends on how you interact with 4Life Solutions.

3.1 Information You Provide Directly

When you contact us, complete a website form, submit an enquiry, request a quotation, communicate with our team or express interest in our products, programmes or partnerships, we may collect:

• Full name;

• Email address;

• Telephone or mobile number;

• Organisation or company name;

• Job title or professional position;

• Country or general location;

• Details concerning your organisation, project or programme;

• Products or services in which you are interested;

• Partnership, distribution or programme information;

• Information contained in correspondence with us; and

• Other information you voluntarily provide.

We will seek to collect only information that is reasonably necessary for the relevant purpose.

3.2 Information Collected Automatically

When you use our website, certain technical information may be collected automatically, including:

• IP address;

• Browser type and version;

• Device type;

• Operating system;

• Referring website;

• Pages viewed;

• Date and time of visits;

• Approximate geographic location derived from an IP address;

• Website interaction information; and

• Technical information required for website security, diagnostics and performance.

Information regarding our use of cookies and similar technologies is contained in our separate Cookie Policy.

4. How We Collect Personal Data

We generally collect personal data:

Directly from you when you:

• Complete a form on our website;

• Contact us by email or through another communication channel;

• Request information or a quotation;

• Contact us regarding a programme, partnership or distribution opportunity;

• Communicate with our representatives; or

• Otherwise voluntarily provide information to us.

We may also receive information indirectly from:

• Organisations with which you are associated;

• Partners and programme participants;

• Publicly available professional or organisational sources;

• Service providers; or

• Other lawful sources.

Where personal data is collected indirectly, we will provide the information and notices required by applicable Kenyan data protection law where necessary.

5. Purposes for Which We Process Personal Data

We may process personal data for purposes including:

• Responding to enquiries and requests;

• Providing information about 4Life Solutions and our activities;

• Responding to requests for product information or quotations;

• Managing relationships with customers, partners, NGOs, donors, distributors and other stakeholders;

• Evaluating prospective partnerships, programmes and collaborations;

• Communicating regarding projects and programmes;

• Providing customer or technical support;

• Processing legitimate business and organisational communications;

• Operating and maintaining our website;

• Improving website functionality and user experience;

• Measuring and understanding website usage and performance;

• Protecting our website, information systems and users from spam, fraud, misuse and cybersecurity threats;

• Maintaining appropriate business and administrative records;

• Fulfilling contractual obligations;

• Meeting legal, regulatory, audit and compliance obligations;

• Establishing, exercising or defending legal claims; and

• Other purposes that are compatible with the reason the personal data was collected.

Where we wish to process personal data for a materially different purpose, we will determine whether that additional processing is lawful and, where required, obtain fresh consent.

6. Lawful Basis for Processing

We will only process personal data where there is an appropriate lawful basis.

Depending on the circumstances, our lawful basis may include:

Consent

Where you have freely given specific, informed and unambiguous consent for a particular processing activity.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect processing lawfully carried out before your consent was withdrawn.

Performance of a Contract

Where processing is necessary to:

• Perform an agreement with you; or

• Take steps at your request before entering into an agreement.

Compliance With a Legal Obligation

Where processing is necessary for 4Life Solutions to comply with an obligation imposed by applicable law.

Legitimate Interests

Where processing is necessary for a legitimate interest pursued by 4Life Solutions or another party and those interests are not overridden by your rights and fundamental freedoms.

Where appropriate, we assess whether reliance on legitimate interests is necessary, proportionate and appropriately balanced against the rights of affected individuals.

Protection of Vital Interests

Where processing is necessary to protect the vital interests of an individual.

Public Interest

Where processing is necessary for the performance of a task carried out in the public interest and applicable law permits such processing.

7. Sensitive Personal Data

4Life Solutions does not ordinarily seek to collect sensitive personal data through its public website.

Under Kenyan law, certain categories of information receive additional protection.

Where it becomes necessary for us to process sensitive personal data, we will only do so where an appropriate lawful basis and applicable conditions for processing exist and will implement appropriate safeguards.

Please avoid providing sensitive personal information through general website enquiry forms unless it is genuinely necessary.

8. Children’s Personal Data

Our website is not primarily directed at children.

We do not knowingly use our website to solicit unnecessary personal data directly from children.

Where we are required to process personal data relating to a child in connection with a programme or other legitimate activity, we will comply with applicable Kenyan requirements relating to children’s personal data, including obtaining appropriate consent from a parent or guardian where required and ensuring that processing protects the child’s best interests.

9. Direct Marketing

We may occasionally communicate information about 4Life Solutions, our products, programmes, initiatives or related activities where permitted by law.

Where consent is required for direct marketing, we will obtain the appropriate consent before sending such communications.

Marketing communications will provide an appropriate means of opting out or requesting that the communications cease.

You may withdraw your consent or object to direct marketing at any time without charge.

Opting out of marketing will not prevent us from sending communications that are necessary for an existing contractual, operational or organisational relationship.

10. Website Analytics

We may use website analytics and performance tools to understand how visitors interact with our website.

Information processed for these purposes may include:

• Pages viewed;

• Traffic sources;

• Device and browser information;

• Approximate geographic location;

• Website interactions; and

• Website performance information.

We use this information to improve our website, identify technical problems, understand how our content is used and evaluate our digital communications.

Further information concerning cookies and similar technologies is available in our separate Cookie Policy.

11. Embedded Content and External Websites

Our website may contain links to or embedded content from third-party websites and platforms, including videos, images, maps, social-media content or other external resources.

When you interact with embedded third-party content, the relevant third party may collect information about your interaction in accordance with its own privacy policy.

External websites are independently responsible for their privacy practices.

4Life Solutions is not responsible for the privacy practices of third-party websites that we do not control. We encourage you to review their privacy policies before providing personal data.

12. Sharing and Disclosure of Personal Data

4Life Solutions does not sell personal data.

We may disclose personal data only where reasonably necessary and lawfully permitted.

Recipients may include:

• Authorised 4Life Solutions employees and representatives;

• Affiliated or related entities where appropriate;

• IT and cybersecurity service providers;

• Website hosting and infrastructure providers;

• Email and communications providers;

• Customer relationship management and business software providers;

• Analytics and website-performance providers;

• Professional advisers, including lawyers, accountants and auditors;

• Project or programme partners where sharing is necessary for a legitimate and lawful purpose;

• Regulators and government authorities; and

• Courts or law-enforcement authorities where disclosure is required or permitted by law.

Access to personal data within 4Life Solutions is limited, where practicable, to individuals who require the information for legitimate organisational purposes.

Where third-party service providers process personal data on our behalf, we take reasonable steps to ensure that appropriate contractual, organisational and security safeguards are in place.

13. International Transfers of Personal Data

4Life Solutions works with organisations, partners and technology providers in different countries.

As a result, personal data may in certain circumstances be processed or stored outside Kenya.

We will not transfer personal data outside Kenya unless the transfer complies with applicable requirements under the Data Protection Act, 2019 and related regulations.

Depending on the circumstances, this may include ensuring:

• The recipient is subject to appropriate data protection safeguards;

• Appropriate contractual or other safeguards are in place;

• The transfer is necessary under a lawful exception recognised by law; or

• The data subject has provided valid consent where consent is an appropriate basis for the transfer.

Where sensitive personal data is involved, we will apply the additional requirements prescribed by Kenyan law.

14. Data Retention

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected.

In determining appropriate retention periods, we may consider:

• The purpose for which the information was collected;

• The nature and sensitivity of the information;

• The duration of an ongoing business, programme or partnership relationship;

• Applicable contractual requirements;

• Legal and regulatory requirements;

• Accounting and audit requirements;

• The need to establish, exercise or defend legal claims; and

• Security and fraud-prevention requirements.

When personal data is no longer reasonably required, we will take appropriate steps to delete, destroy or anonymise it, subject to applicable legal requirements.

15. Security of Personal Data

4Life Solutions takes reasonable and appropriate technical and organisational measures to protect personal data against:

• Unauthorised access;

• Unlawful processing;

• Accidental disclosure;

• Alteration;

• Loss;

• Destruction; and

• Damage.

Depending on the nature of the information and processing involved, our safeguards may include:

• Access controls;

• Authentication measures;

• System and network security;

• Restricted access to personal information;

• Security monitoring;

• Backups and recovery measures;

• Appropriate contractual controls with service providers; and

• Organisational policies and procedures.

While we take reasonable steps to protect personal data, no website, internet transmission or electronic information system can be guaranteed to be completely secure.

16. Personal Data Breaches

4Life Solutions maintains procedures for identifying, assessing and responding to suspected or confirmed personal data breaches.

Where a personal data breach occurs, we will assess the nature and potential consequences of the breach and take appropriate measures to contain and address it.

Where notification is required under the Data Protection Act, 2019, we will notify the Office of the Data Protection Commissioner and affected data subjects within the applicable statutory requirements.

17. Your Rights as a Data Subject

Subject to applicable Kenyan law and any lawful limitations, you may have the right to:

Right to Be Informed

You have the right to be informed about how your personal data will be used.

Right of Access

You may request access to personal data held about you.

Right to Object

You may object to the processing of all or part of your personal data where applicable.

Right to Rectification

You may request correction of personal data that is inaccurate, false, incomplete or misleading.

Right to Erasure

You may request deletion or erasure of personal data where the applicable legal requirements are satisfied.

Right to Restriction of Processing

You may request that processing of your personal data be restricted in circumstances recognised by applicable law.

Right to Data Portability

Where applicable, you may request certain personal data in a structured, commonly used and machine-readable format and may have the right to transmit that information to another data controller or processor.

Right to Withdraw Consent

Where we rely on your consent, you may withdraw that consent at any time.

Rights Relating to Automated Decision-Making

Where applicable, you have protections in relation to decisions based solely on automated processing that produce legal or similarly significant effects.

4Life Solutions does not ordinarily make decisions concerning website visitors based solely on automated processing that produces legal or similarly significant effects.

18. Exercising Your Rights

If you wish to exercise a data protection right, you may contact 4Life Solutions using the contact details provided below.

Your request should contain sufficient information to allow us to identify the relevant personal data and understand the nature of your request.

We may request reasonable information to verify your identity before providing access to, altering or deleting personal data. This is intended to prevent unauthorised persons from obtaining or changing your information.

We will handle data-subject requests within the periods prescribed by applicable Kenyan law.

Where we are unable to comply with a request in whole or in part, we will provide an explanation where required by law.

19. Complaints

If you have concerns about how 4Life Solutions has collected or processed your personal data, we encourage you to contact us first so that we can investigate and respond to your concern.

You also have the right, where applicable, to lodge a complaint with the:

Office of the Data Protection Commissioner (ODPC)
Republic of Kenya

Information about the ODPC and its complaints procedures is available through its official website:

https://www.odpc.go.ke

Your right to contact the ODPC is not affected by first raising a concern directly with 4Life Solutions.

20. Accountability and Data Protection by Design

4Life Solutions seeks to incorporate privacy and data protection considerations into relevant systems, projects, programmes and business processes.

Where appropriate, we apply measures designed to:

• Limit personal data collection to what is necessary;

• Restrict access to authorised individuals;

• Identify privacy and security risks;

• Apply appropriate safeguards;

• Maintain appropriate records concerning processing activities;

• Assess service providers that process personal data;

• Protect personal data throughout its lifecycle; and

• Periodically review our data protection practices.

Where processing is likely to result in a high risk to the rights and freedoms of individuals, we will undertake a Data Protection Impact Assessment where required by applicable law.

21. Changes to This Privacy Policy

We may amend this Privacy Policy periodically to reflect changes in:

• Our activities or programmes;

• The operation of our website;

• Technology and information systems;

• Our processing activities;

• Applicable legislation or regulations; or

• Guidance issued by the Office of the Data Protection Commissioner.

The current version will be published on our website with the applicable Last Updated date.

Where a change materially affects how personal data is processed, we will take reasonable steps to provide additional notice where required.

22. Contact Us

If you have questions about this Privacy Policy, concerns regarding the processing of your personal data, or wish to exercise any of your data protection rights, please contact:

4Life Solutions
Website: https://4lifesolutions.com
Email: hm@4lifesolutions.com

Data Controller: 4Life Solutions Africa SEZ Ltd

Where applicable:

Data Protection Officer / Data Protection Contact:
Hanif Mubasher
hm@4lifesolutions.com

We will handle privacy enquiries and data-subject requests in accordance with applicable Kenyan data protection law.

---

© 4Life Solutions. All rights reserved.