Privacy Policy

This policy explains what personal data this site collects, why, and how you can exercise your rights over it. It is written in plain English rather than legal jargon.

Who We Are

Esther Mello ("we", "us", "our") is the controller responsible for the personal data collected through this website. You can reach us at esthermello50@gmail.com. We are based in Nairobi, Kenya.

This site is currently published at a placeholder production domain (https://esthermello.com) pending registration of the client's permanent domain. This is a known and accepted Phase 3 waiver.

What Personal Data We Collect

  • Name and email address, when you book a consultation through the Calendly widget embedded on the Connect page.
  • IP address, browser data and page views, collected automatically through analytics tools when you browse the site.

We do not collect payment information through this site, and we do not knowingly collect data from children.

Why We Collect It

  • To respond to your enquiries and confirm bookings (contractual necessity).
  • To improve the site and understand how visitors use it (legitimate interest).
  • To measure site traffic through analytics, where cookies are used (consent-based).

How Long We Retain Data

  • Enquiry and booking data is retained for 12 months after our last contact with you, then deleted.
  • Analytics data is retained according to each provider's own settings — Google Analytics 4 defaults to 14 months; Vercel Analytics stores no personal data.

Third-Party Services

We use a small number of trusted third-party providers, each bound by its own privacy policy:

Your Rights

You have the right to access, correct, erase, restrict, or object to how we process your personal data, and the right to receive a portable copy of it. To exercise any of these rights, contact us at esthermello50@gmail.com.

Supervisory Authority

If you believe your data has been mishandled, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, the supervisory authority for data protection in Kenya — odpc.go.ke.

Cookies

  • Session cookies required for the site to function.
  • Analytics cookies (Google Analytics 4), only if you consent via the cookie banner.

You can opt out at any time through the cookie consent banner's preferences, or by changing your browser settings to block cookies.

Changes to This Policy

We may update this policy from time to time. The effective date below reflects the most recent revision.

Effective Date

This policy is effective as of 12 August 2026.