Privacy Policy

Applied Principles Group respects your privacy. This policy explains what personal information we collect through appliedprinciplesgroup.com, why, who sees it, and what rights you have.

1. Who we are

Applied Principles Group (“we”, “us”) is a group of information security and digital forensics companies with offices in Kenya, Uganda, Tanzania and the Democratic Republic of the Congo. The companies in each country operate as Applied Principles Limited. This website is operated by Applied Principles Limited (Kenya), which is responsible for the personal information collected through it. Where we pass your enquiry to a group company in another country, that company also handles it under this policy.

For privacy questions or requests, contact privacy@appliedprinciplesgroup.com. You can also reach our data protection officer at dpo@appliedprinciplesgroup.com, or any office listed at the end of this policy.

2. What this policy covers

This policy covers this website only. It does not cover information we collect offline, or under a contract for our services. Those are governed by the terms of that engagement.

3. Information we collect

Information you give us.

• Contact forms: on the Contact page, the Services pages and the contact button shown on every page, your name, email address, phone number and message, and on the Contact and Services forms also the topic and a subject.
• Training request form: your organisation, country, your name and job title, email address, optional phone number, number of participants, target dates, the training you are interested in, and any description you add.
• Emails and calls you send to us.

Information collected automatically. Our servers and security tools record technical data when you visit, such as your IP address, browser type, device, pages visited and the date and time. When you send a form, the website also saves the date and time, the page you sent it from, your IP address and your browser details with your submission.

We do not use analytics or advertising trackers on this website.

4. Why we use your information

• To reply to your enquiry or training request and to prepare a proposal.
• To keep the website secure and to block spam and abuse.
• To meet legal and regulatory obligations.
• To improve our website and services, using only information we already hold.

We rely on your consent, on steps you ask us to take before a contract, and on our legitimate interest in running a secure business, as applicable local, regional and international law allows. You can withdraw consent at any time.

5. Who we share it with

We do not sell your personal information. We share it only with:

• Group companies in other countries, to route your enquiry to the right team.
• Microsoft, whose Microsoft 365 service carries our email and stores our mailboxes.
• Our website hosting provider, which stores the website and a copy of form submissions.
• Cloudflare, whose Turnstile service checks that form and login requests come from people, not bots.
• LinkedIn, only if you choose to load LinkedIn posts on our Blog page.
• Google, only if you choose to view this website in French (see “Automatic translation” below).
• Professional advisers and authorities, where the law requires it.

Automatic translation: When you select French, page content is translated using Google Translate. This involves your browser connecting to Google’s servers. We do not send Google any information you enter into our forms. Please see Google’s privacy policy for how it handles data.

6. Transfers across borders

Our teams work across four countries, so information may be handled in more than one of them. Where information leaves your country, we protect it as applicable local, regional and international law requires.

7. How long we keep it

We keep enquiries and saved copies of form submissions for 12 months, unless we start working together, in which case the engagement terms apply. We then delete or anonymise the information.

8. Security

We use technical and organisational measures to protect personal information, including access controls, encrypted connections and spam protection. No website can be guaranteed completely secure. Please do not send passwords, credentials or sensitive incident details through the website forms.

9. Your rights

Depending on your country, you may have the right to:

• be told how your information is used, and ask for a copy;
• ask us to correct or complete it;
• ask us to delete it, or to stop or limit its use;
• object to uses based on our legitimate interest;
• withdraw consent you gave; and
• complain to the data protection regulator in your country.

We handle your information in line with applicable local, regional and international data protection law. Our group companies are registered with the data protection regulators in the countries where registration is required.

To use these rights, email privacy@appliedprinciplesgroup.com. We will reply within the time the law allows.

10. Children

This website is not directed at children under 18. We do not knowingly collect their personal information.

11. Links to other sites

Our site links to other websites, such as LinkedIn. We do not control them, and their own privacy policies apply to what they collect.

12. Changes to this policy

We will post any update on this page and change the date below. Last updated: 18 October 2026.

13. Contact us

Privacy requests: privacy@appliedprinciplesgroup.com. Data protection officer: dpo@appliedprinciplesgroup.com.