Privacy policy

Who is responsible

I am Alice Allindi, a Certified Weight Loss Coach working in Nairobi, Kenya. I run this website myself, and I am the data controller for the information described below — meaning the decisions about it are mine, and so is the responsibility.

You can reach me at aliceallindi@yahoo.com or on WhatsApp at +254 722 964 286.

What I collect, and when

When you ask for the free guide

I collect your email address, and nothing else. I use it to send you the guide and, from time to time, to write to you about coaching, new habits worth trying, and when a programme is opening. Every one of those emails has an unsubscribe link, and using it removes you from the list straight away. You do not have to give me an email address to read the guide — the download appears either way.

When you send an enquiry

The form asks for your name, your email address, the topic you picked and whatever you write in the message box. I use it to answer you. Sending an enquiry does not add you to the mailing list.

When you book a call

Booking goes through Calendly. You give Calendly your name, your email address and a time; Calendly tells me the appointment and handles the reminder. Calendly keeps that booking under its own privacy policy as well as mine.

When you message me on WhatsApp

I see your message and the phone number it came from, the same as any other WhatsApp conversation. WhatsApp itself is run by Meta, under Meta's terms, not mine. If you would rather not use it, email works just as well.

Automatically, when any page loads

The company that hosts this website keeps a short technical log of requests — the page asked for, the time, the browser type and the IP address it came from. Every website has one; it is how a host spots an attack or a broken page. I do not use those logs to build any picture of you, and I cannot connect them to your name.

I may also measure how many people visit which pages, using a service that counts visits in aggregate without cookies and without following anyone from site to site. That tells me the method page is read more often than the gallery. It does not tell me who read it.

What I deliberately do not do

• No cookies. There is no consent banner on this site because there is nothing to consent to.
• No advertising or re‑targeting pixels. Nothing here follows you to another website.
• No Facebook, Instagram or other social media tracking scripts, even though I link to those profiles.
• No selling, renting or sharing of your details with anyone for marketing.
• No buying of email lists, and no adding anyone who did not ask.

Health information

This matters more here than on most websites, so it gets its own section.

Nothing on this site asks you about your health. But people often tell me anyway — in the message box, in a booking note, or on WhatsApp. They mention a diagnosis, a medication, a weight, a pregnancy, something a doctor said. Under Kenyan law that is sensitive personal data, and it deserves more care than an ordinary email address.

So: please do not feel you have to put any of it in a web form. A sentence like “I would like to talk about my situation” is enough to start, and the rest can wait for a conversation. If you do send health details, I treat them as confidential, I do not pass them to anyone else, and I do not use them in any marketing, case study or social media post without asking you first and getting a clear yes.

One thing I should be straightforward about: I am a weight loss coach, not a doctor. Nothing I send you is medical advice or a diagnosis, and it is not a substitute for seeing a clinician about a condition.

Why I am allowed to hold it

Under the Data Protection Act, 2019 I need a lawful reason for holding your information. Mine are straightforward:

• You asked me to. You typed your email address in to get the guide, or wrote to me with a question. That is consent, and you can withdraw it.
• We are working together, or deciding whether to. Answering your enquiry and running your coaching programme both need your contact details.
• I have to keep some records. Payment and invoice records have to be kept for tax purposes whether either of us wants them kept or not.

Who else can see it

Only the services that make the website and my practice work, and only the part each one needs. None of them are allowed to use your information for their own purposes.

• Vercel — hosts the website and keeps the technical request log.
• Web3Forms — carries enquiry form messages to my inbox.
• Zoho Campaigns — stores the mailing list and sends the guide and any newsletters.
• Calendly — takes bookings for calls.
• My email provider — because an email has to live somewhere.

Some of these companies are outside Kenya, which means your information may be stored on servers abroad. I would also hand something over if the law genuinely required it — a court order, for instance — but I will tell you if that ever happens and I am permitted to.

How long I keep it

• Mailing list: until you unsubscribe, or until you have ignored everything I have sent for about two years, at which point I remove you rather than keep emailing a stranger.
• Enquiries: while we are talking, and for two years afterwards in case you come back. Then deleted.
• Coaching clients: for as long as we work together, and afterwards only what I need — the record of the work and anything tax law requires.
• Technical logs: a short period set by the host, usually weeks rather than months.

Your rights

The Data Protection Act, 2019 gives you real rights over your own information, and they are not difficult to use. You can ask me to:

• tell you what I hold about you, and give you a copy;
• correct anything that is wrong;
• delete it;
• stop using it for a particular purpose, marketing above all;
• hand it to you in a portable form, or send it on somewhere else.

Email me and I will deal with it within thirty days. There is no charge, and you do not have to give a reason. If you only want the emails to stop, the unsubscribe link at the bottom of any of them is faster than writing to me.

If I handle it badly, you can complain to the Office of the Data Protection Commissioner, the regulator for this in Kenya. I would rather you came to me first and gave me the chance to put it right.

Keeping it safe

The website is served over an encrypted connection, so anything you type into a form is encrypted on its way to me. The services above are chosen partly for their own security, and my accounts have two‑factor authentication switched on. I keep as little as I can for as short a time as I can, which is the only security measure that never fails.

I will not pretend this is impossible to breach — nobody can. If something happens that puts your information at real risk, I will tell you and the Data Protection Commissioner, as the Act requires.

Children

This website and my coaching are for adults. I do not knowingly collect information about anyone under eighteen. If a child has sent me something, tell me and I will delete it.

If this page changes

When I change how any of this works, I will update this page and change the date at the top. If the change is a significant one and I have your email address, I will write and tell you rather than quietly editing the page.