Legal

Privacy Policy

Effective 27 July 2026

This Privacy Policy explains how NAVAC GLOBAL ("NAVAC", "we", "us") collects, uses, and protects personal information when you interact with us — through our website (navac.co.ke), when you request a briefing or subscribe to our newsletter, when you use NAVAC Academy, and when you message or call us through WhatsApp, Messenger, Instagram, SMS, or phone as part of our customer communications.

By using our website or communicating with us through any of these channels, you agree to the collection and use of information as described here. If you have any questions, contact us at info@navac.co.ke.

1. Information we collect

What we collect, and when

When you request a briefing or fill in a form on our site

Your name, work email, phone number, job title, organization details, and the message you send us — so we can respond to your inquiry.

When you use NAVAC Academy

Your name, email address, and profile photo (from Google sign-in), plus your course progress, quiz results, and any reflections or assignment answers you choose to save to your account.

When you subscribe to our newsletter

Your email address.

When you message or call us — WhatsApp, Messenger, Instagram, SMS, and voice

Your name and phone number; your WhatsApp, Messenger, or Instagram account identifier (the technical ID those platforms use to route a conversation to and from you); and the content of the conversation itself — the messages and attachments exchanged, and, for phone calls placed through our call centre, the call's date, time, and duration, and the recording if that call is recorded.

Automatically, via analytics

Our website may use privacy-respecting analytics tools, such as Google Analytics and Microsoft Clarity, to understand general usage patterns — pages viewed, how visitors move through the site. These tools may set cookies in your browser. We do not use this data to identify you personally.

2. How we use it

What your information is used for

  • To respond to and manage your inquiries, and to deliver the leadership development, organizational transformation, or technology enablement services you've requested.
  • To deliver NAVAC Academy course content, track your learning progress, and issue certificates.
  • To respond to and manage customer conversations across WhatsApp, Messenger, Instagram, SMS, and voice — order confirmations, customer support, and answering questions.
  • To send you the newsletter you signed up for, which you can unsubscribe from at any time, directly from any newsletter email.
  • To maintain business records, and to meet legal or regulatory obligations.
  • To understand, in aggregate, how people use our website, so we can improve it.

We do not sell your personal information to anyone, for any purpose.

3. Who we share it with

Third parties involved in processing your data

Because our services run on top of established platforms, your information passes through the following providers as part of normal operation:

Meta Platforms, Inc.

Operates the WhatsApp Business Platform, Messenger, and Instagram. Messages you send and receive through these channels are transmitted through Meta's infrastructure, under Meta's own platform terms and policies.

Africa's Talking

Provides the SMS and voice/telephony infrastructure we use to send text messages and to place or receive calls.

Resend

Delivers our transactional and newsletter emails.

4. Data storage and security

How we store and protect your data

Provider credentials are never stored in plain text

The API keys and access tokens that let us send messages through WhatsApp, Messenger, Instagram, and Africa's Talking are held in a dedicated Secret Manager, not in our database. They are retrieved only at the moment we need to send or verify a message, and are never displayed on any screen or written to any log.

Incoming messages are verified

Every inbound WhatsApp, Messenger, and Instagram message is cryptographically checked against a signature Meta attaches to it, so a message cannot be spoofed or forged before we act on it.

Access is restricted

Conversation records, contact details, and call logs are stored in an access-controlled database and are only visible to NAVAC staff who need them to do their job.

How long we keep it

We keep personal information for as long as it's needed for the purposes described in this policy — generally, the length of our relationship with you plus a reasonable period afterward for business record-keeping — and delete it sooner at your request (see your rights, below).

Where it's processed

Because we rely on global providers (Meta, Africa's Talking, Google Cloud), your information may be processed on servers located outside Kenya, as part of those providers' standard infrastructure.

5. Your rights

Your choices and how to reach us

You can ask us, at any time, to:

  • Tell you what personal information we hold about you.
  • Correct information that's inaccurate or out of date.
  • Delete your information, including your message history with us.
  • Stop using your information for a particular purpose — for example, unsubscribing from our newsletter.

To do any of this, email us at info@navac.co.ke and we'll respond as quickly as we can.

Children

Our services are intended for business professionals and are not directed at children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time — for example, as we add new communication channels or providers. We'll update the effective date above when we do. Continued use of our services after a change means you accept the updated policy.

Next Step

Build stronger leaders. Improve performance. Grow with confidence.

In a confidential executive briefing, a senior NAVAC partner will help you pinpoint the single highest-leverage shift for your organization — and what it would take to make it.