Privacy policy
Last updated 2026-10-12. This policy covers the website at https://crystaline.co.ke. The Crystaline ERP application itself, and the data a customer keeps in it, are governed by the customer's licence agreement.
Who we are
Sajsoft Solutions Ltd ("we"), Raja Building, 3rd Floor, Biashara Street, Nairobi, Kenya, is the data controller for information collected on this website. Contact: info@sajsoft.co.ke, +254 725 473 779.
What we collect and why
- Enquiry, quote, demo, support and partner forms: your name, a WhatsApp number or email address, your country and business type, and any message you add. We use it to reply to you and, with your consent, to tell you about Crystaline ERP. We also record which page and button you used, the campaign that brought you (UTM parameters), the referring site, the time, and the IP address, to understand where enquiries come from and to prevent abuse.
- WhatsApp: when you tap a WhatsApp link we open a chat with a pre-written message. WhatsApp (Meta) processes that conversation under its own terms. We keep the conversation as part of our sales records.
- Online orders: your name, business name, email, WhatsApp number, the package ordered and the payment reference. Card and M-Pesa details are entered on our payment provider's page (Paystack) and never reach our server. We keep the order record for accounting purposes.
- Site statistics: this site does not run third-party analytics. The web server keeps standard access logs (IP address, page, time) for security.
- Bot protection: forms use a hidden field and timing checks; no third-party service is involved.
Where it goes
Form submissions are stored on our web hosting in a folder outside the public site and are emailed to our sales team. We do not sell personal data. We share it only with service providers who help us run the website and payments (hosting, email, Paystack) and where the law requires.
How long we keep it
Enquiries are kept for up to 24 months after the last contact, or longer if you become a customer. Order and payment records are kept for the period required by Kenyan tax and company law.
Your rights
Under the Data Protection Act, 2019 (Kenya) you may ask what personal data we hold about you, ask us to correct or delete it, object to marketing, and complain to the Office of the Data Protection Commissioner. Write to info@sajsoft.co.ke. Marketing messages stop as soon as you tell us.
Cookies and local storage
This website sets no advertising cookies. The browser keeps a small note of the campaign that first brought you here (so we know which advert worked) and whether you sent a form; nothing in it identifies you. You can clear it from your browser at any time.
Changes
We update this page when our practices change. The date at the top is the version you are reading.