Privacy policy.
Plain English, no filler: exactly what we collect when you message us, book a session or buy merch — and how to get it back or deleted.
Last updated: 10 September 20261. Who we are
The Boyz Ke is a podcast, media and merchandise brand based in Ruiru, Kenya. This policy covers theboyz.ke and everything on it.
For the purposes of the Data Protection Act, 2019 (Kenya), we are the data controller for the information described below. If you are in the UK or EU, we are the controller under the UK GDPR and EU GDPR respectively.
You can reach us any time at theboyz.ke@gmail.com.
2. What we collect
We only collect what you actively type into a form, plus what your Google account gives us when you sign in. We do not run our own analytics or tracking pixels. We do carry advertising through Google AdSense, which is described in section 7.
| Where | What we receive |
|---|---|
| Contact form | Your name, email address, chosen topic and your message |
| Collaboration booking | Your name, email, show or brand name, audience size, topic, any links you share, and the date and time slot you request |
| Services & advertising request | Your name, email, phone number, company, budget range, timeline, the package you picked and your brief |
| Newsletter signup | Your email address only |
| Merch order | Delivery name, phone number, town and address, plus the items and quantities you ordered |
When you sign in with Google
Signing in is only required to place an order. We receive your name, email address, profile picture URL and a Google account identifier. We never receive or store your Google password.
When you pay
Card and mobile-money details are entered directly into Paystack's secure payment window and are never sent to us or stored on our servers. We only receive back a transaction reference, the amount, the payment channel used (for example M-Pesa or card) and whether the charge succeeded.
Server logs
Our host, Google Firebase Hosting, keeps standard request logs that may include your IP address, browser type and the pages you requested. These are generated automatically by the hosting infrastructure and are used for security and troubleshooting.
3. Why we collect it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your message or enquiry | Your consent, and our legitimate interest in answering people who contact us |
| Confirming and running a booking | Steps taken at your request before entering a contract |
| Taking payment, packing and delivering an order | Performance of our contract with you |
| Sending order receipts and booking confirmations | Performance of our contract with you |
| Sending the newsletter | Your consent — withdrawable at any time |
| Keeping records of sales | Our legal obligations, including tax |
| Keeping the site secure and working | Our legitimate interest in preventing abuse |
We do not sell your personal data, and we never pass anything you send us through a form to advertisers. Google's advertising cookies operate separately from the information you give us — see section 7.
4. What we store on your device
Google AdSense sets advertising cookies on this site; those are covered in section 7. Separately, the site stores a small amount of data in your browser so that it simply works:
| Name | What it does | Lasts |
|---|---|---|
| tbke_cart | Remembers what is in your shopping bag between visits | Until you clear it |
| tbke_yt_v1 | Caches the episode list so the page loads faster and we use less of our YouTube quota | 30 minutes |
| tbke_preloaded | Remembers that you have already seen the intro animation | Until you close the tab |
| Firebase Auth token | Keeps you signed in so you do not have to log in on every page | Until you sign out |
All of these can be removed by clearing your browser's site data. Clearing them will empty your bag and sign you out, but nothing else will break.
6. YouTube embeds and Google Fonts
Episodes play through YouTube's privacy-enhanced embed (youtube-nocookie.com), which does not set advertising cookies until you actually press play. Once you play a video, YouTube may set cookies and receive your IP address under Google's Privacy Policy.
Our typefaces load from Google Fonts, which receives your IP address in order to serve the font files.
7. Advertising
We use Google AdSense to show adverts on this site. Advertising is what keeps everything here free to read and watch.
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and other sites on the internet.
Google may use the DoubleClick cookie, or similar identifiers, to serve and measure those ads. We never give advertisers your name, email address or anything else you have sent us through a form.
You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
You can opt out of personalised advertising at any time through Google Ads Settings, or opt out of third-party vendors' use of cookies for personalised advertising at aboutads.info/choices.
8. How long we keep it
- Messages and enquiries — kept while we deal with them and for up to two years afterwards, so we have context if you come back to us.
- Bookings — kept for two years after the session date.
- Orders and payment records — kept for seven years, because tax law requires us to keep records of sales.
- Newsletter subscriptions — kept until you unsubscribe or ask to be removed.
You can ask us to delete anything earlier, and we will unless we are legally required to keep it.
9. Your rights
Under the Data Protection Act, 2019 you have the right to:
- Be told how your data is being used — which is what this page is for
- Ask for a copy of the personal data we hold about you
- Have inaccurate data corrected
- Ask us to delete your data
- Object to us processing it, or ask us to restrict how we use it
- Withdraw consent at any time, where consent is what we relied on
To use any of these, email theboyz.ke@gmail.com. We will respond within 30 days. We may ask you to confirm your identity first, so that we do not hand your information to somebody else.
If you think we have handled your data badly and we have not put it right, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke. If you are in the EU or UK, you may complain to your local supervisory authority instead.
10. Security
Your data sits in Google Firestore, protected by security rules that only allow you to read your own orders, and only allow named studio accounts to read enquiries. All traffic to this site is encrypted over HTTPS. Payment card details never touch our systems at all.
No system is perfectly secure, but if a breach ever affects your personal data we will notify you and the Office of the Data Protection Commissioner as the Act requires.
11. Children
This site is not aimed at children under 18, and we do not knowingly collect their personal data. If you believe a child has given us information, email us and we will delete it.
12. Changes to this policy
If we change how we handle your data we will update this page and change the date at the top. Where the change is significant — for example if we start showing advertising — we will say so clearly on the site.