Last updated: 15 October 2026
Wave2 Systems is responsible for deciding how personal data collected through this website and the Maestrore ERP service is used. This notice explains what we collect, why we collect it, how long we retain it, and the choices available to you.
Information we collect and why
- Website contact enquiries When you submit our contact form, we collect your name, email address, optional phone number, enquiry subject, referral source, optional reseller name, and message. We use these details only to respond to your requested service or partnership enquiry by email or phone and to manage that follow-up. We do not use contact enquiries for unrelated marketing.
- Maestrore customer information We process account, subscription, billing, support, and service usage information to provide, secure, support, and improve the services a customer requests.
- Website analytics We use Umami Cloud to measure aggregate page visits, referral sources, browser and device type, country, and interactions with website links and buttons. Umami is configured without analytics cookies. Values entered in the contact form are not sent to analytics.
Our lawful reasons for using information
We process contact enquiries to take steps you request before a possible service or partnership agreement and, for general enquiries, for our legitimate interest in responding to people who contact us. We use customer information to perform our contracts, meet legal obligations, secure the service, and support legitimate business operations. We ask for separate permission before using contact details for optional direct marketing where permission is required.
Who can access information
Website enquiries stored in our online enquiry inbox can be viewed only by authorised Wave2 Systems administrators. We may use carefully selected hosting, infrastructure, email, analytics, and support providers that process information under our instructions. We do not sell personal data. We may disclose information where the law requires it or where necessary to protect legal rights and service security.
How long we retain information
- Unsuccessful or untouched contact enquiries Enquiries that remain untouched or where follow-up is unsuccessful are permanently deleted from our active online database no later than 20 days after submission.
- Successfully handled contact enquiries Once contact is successful, the enquiry is retained while it is handled and is permanently deleted from our active online database no later than 90 days after successful contact. If it is later marked resolved, the 90-day period restarts from that resolution.
- Discontinued customer services After receiving a customer's notice to discontinue service, we erase service data after 45 days unless a longer period is required by law or needed to establish, exercise, or defend a legal claim.
- Long-term non-payment Customer service data may be permanently erased after subscription fees remain unpaid for 60 days, subject to applicable legal and accounting retention duties.
Your data-protection rights
Subject to applicable law, you may ask to be informed about our use of your data, access it, correct inaccurate information, object to or restrict processing, request deletion, or request a portable copy. We may need to verify your identity before completing a request. You may also lodge a complaint with Kenya's Office of the Data Protection Commissioner (opens in new tab).
International processing
If a service provider processes personal data outside Kenya, we use appropriate contractual and organisational safeguards required by applicable data-protection law.
Data security
We use access controls, encrypted network connections, system updates, backups, monitoring, and staff procedures appropriate to the nature of the information. No internet transmission or storage system is completely secure, so we regularly review these safeguards and limit access to people who need it.
Changes to this privacy policy
We review this notice when our processing practices or legal obligations change. We will publish the revised notice here and update the date above.
Contact us
Contact us to ask a privacy question or exercise a data-protection right. Please describe your request clearly and provide the email address used when contacting us.