Legal

Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Tacit Talents (K) Limited (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you use our website and services — including our job board, employer tools, applicant tracking, learning hub and consultancy services (the “Service”). We are the data controller for the personal information you provide, and we are committed to handling it in line with Kenya’s Data Protection Act, 2019. Please also read our Terms of Use.

Summary of key points

  • We collect the information you provide (such as your name, contact details, CV and applications) and some data automatically as you use the site.
  • We use your information to run the platform, connect candidates with employers, deliver training and consultancy, keep the Service secure and comply with the law.
  • We do not sell your personal data.
  • We share data only with trusted service providers, with employers when you apply to their jobs, and where the law requires.
  • You have rights under Kenya’s Data Protection Act, 2019 — including access, correction and deletion.

1. What information do we collect?

Personal information you provide to us

We collect personal information that you voluntarily provide when you register on the Service, express an interest in our products or services, or otherwise contact us. Depending on how you use the Service, this may include:

  • Names, email addresses, phone numbers, and postal or billing addresses;
  • Usernames and passwords, and contact preferences;
  • Job titles and, for candidates, your CV/résumé, employment history, education, skills, aptitude-test results and the job applications you submit;
  • For employers, your company details, job listings, and the information you use to review and manage applicants;
  • Payment information for paid features (such as subscriptions, advertising or paid courses). Card payments are processed by our payment providers — we do not store full card numbers on our systems.

We do not knowingly collect sensitive personal data unless you choose to provide it (for example, within a CV). All personal information you provide must be true, complete and accurate, and you must notify us of any changes.

Information automatically collected

As you use the Service, we automatically collect certain information needed to operate and secure it, including your Internet Protocol (IP) address, browser and device characteristics, operating system, language preferences, referring URLs, pages viewed, and general (approximate) location data. We also keep log and usage data. Much of this is collected through cookies and similar technologies (see section 5).

2. How do we process your information?

We process your personal information to provide, improve and administer our Service, to communicate with you, for security and fraud prevention, and to comply with the law. Specifically, we may process your information to:

  • Create and manage your account and authenticate you;
  • Deliver the Service — for example, to let candidates apply for jobs and employers review and manage applications, and to provide learning, assessment and consultancy services;
  • Respond to your enquiries and provide user support;
  • Send you administrative information about your account, our terms, and policy changes;
  • Process your orders and manage payments for paid features;
  • Request feedback and contact you about your use of the Service;
  • Send you marketing and promotional communications where permitted (you can opt out at any time);
  • Protect the Service, prevent fraud and abuse, and keep our community safe;
  • Evaluate and improve the Service, our products, marketing and your experience.

4. When and with whom do we share your personal information?

We may share your personal information in the following situations:

  • Service providers and processors — trusted third parties who perform services for us, such as web hosting and data storage, payment processing, analytics, email and communication, and customer support. They may access your data only to perform these tasks on our behalf and are bound to keep it confidential.
  • Employers — when you apply for a job, the relevant employer can see your application and the profile information you submit (such as your name, contact details, CV and answers). Employers act as independent data controllers for the data they receive.
  • Business transfers — we may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or part of our business.
  • Legal and regulatory — where required to comply with applicable law, a lawful request by a public authority, or to protect our rights, safety and property or those of others.
  • With your consent — for any other purpose disclosed to you at the time and to which you agree.

Where the Service uses mapping features, the Google Maps Platform APIs may be used, subject to Google’s terms and privacy policy. We do not sell your personal data.

5. Do we use cookies and other tracking technologies?

We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information, keep you signed in, remember your preferences, and understand how the Service is used so we can improve it. You can usually set your browser to refuse cookies or alert you when they are being used; however, some parts of the Service may not function properly without them.

6. How long do we keep your information?

We keep your personal information only for as long as necessary to fulfil the purposes set out in this notice, unless a longer retention period is required or permitted by law (for example, for tax, accounting or other legal requirements). When we no longer have a legitimate need to process your information, we will delete or anonymise it, or, if that is not possible, securely store it and isolate it from further processing until deletion is possible.

7. How do we keep your information safe?

We aim to protect your personal information through appropriate organisational and technical security measures, including encryption in transit, access controls and the principle of least privilege. However, no method of transmission over the Internet or electronic storage can be guaranteed to be 100% secure, so we cannot promise absolute security. You are responsible for keeping your password confidential and for any activity under your account.

8. Do we collect information from minors?

The Service is intended for individuals who are at least 18 years old. We do not knowingly collect data from, or market to, children under 18. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and take reasonable steps to delete the data. If you believe we may have collected information from a minor, please contact us at info@tacittalentsk.co.ke.

9. What are your privacy rights?

Under Kenya’s Data Protection Act, 2019, you have the following rights in respect of your personal information:

  • To be informed of how your data is being used;
  • To access the personal information we hold about you;
  • To request correction of inaccurate or incomplete data;
  • To request deletion (erasure) of your data;
  • To object to, or request restriction of, certain processing;
  • To data portability, where applicable;
  • To withdraw consent at any time, where we rely on consent;
  • Not to be subject to a decision based solely on automated processing that significantly affects you.

To exercise any of these rights, contact us at info@tacittalentsk.co.ke. You may also review or change your account information at any time by signing in to your account. You can opt out of marketing emails using the unsubscribe link in any such message.

If you believe we have not handled your personal information lawfully, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

10. Controls for Do-Not-Track features

Most web browsers include a Do-Not-Track (“DNT”) feature. As no uniform technology standard for recognising and implementing DNT signals has been finalised, we do not currently respond to DNT browser signals. If a standard is adopted in future, we will update this notice accordingly.

11. Do we make updates to this notice?

Yes. We may update this privacy notice from time to time to stay compliant with relevant laws and to reflect changes to our practices. The updated version will be indicated by a revised “Last updated” date and will be effective as soon as it is accessible. We encourage you to review this notice periodically.

12. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at info@tacittalentsk.co.ke, call +254 741 893 464, or write to us at Tacit Talents (K) Limited, Williamson House, 3rd Floor, Fourth Ngong Avenue, Upper Hill, Nairobi, Kenya.

13. How can you review, update or delete your data?

You have the right to request access to the personal information we collect from you, to change or correct that information, or to ask us to delete it. To make such a request, please sign in to your account or email us at info@tacittalentsk.co.ke, and we will respond in accordance with applicable law.

Tacit Talents (K) Limited

Address:
Williamson House, 3rd Floor, Fourth Ngong Avenue, Upper Hill, Nairobi, Kenya

© 2026 Tacit Talents (K) Limited. All rights reserved.