1. Who we are
Ctrl_Alt_Work is a coworking space preparing to open in Westlands, Nairobi. For the purposes of the DPA, we are the data controller of the personal data described in this policy. You can reach us about privacy matters at privacy@ctrlaltwork.org.
2. The personal data we collect
When you join our waitlist or use this website, we may collect:
- Contact details — your email address and, optionally, your name.
- Preferences — the membership plan you express interest in, and how you reached us.
- Communications — messages you send us and our correspondence with you.
- Technical and usage data — limited information your browser shares automatically (such as approximate location, device and browser type, and pages viewed), and information collected through cookies as described in our Cookie Policy.
We do not knowingly collect special categories of personal data through this website.
3. How and why we use your data
We process your personal data for the following purposes and lawful bases under the DPA:
- To operate the waitlist and contact you about our launch, founding-member rates, and availability — based on your consent.
- To respond to your enquiries and provide information you request — based on taking steps at your request prior to entering a contract.
- To improve and secure our website and prevent abuse or fraud — based on our legitimate interests, balanced against your rights.
- To comply with the law and respond to lawful requests from public authorities — based on our legal obligations.
4. Consent and how to withdraw it
Where we rely on your consent, you may withdraw it at any time — for example, by using the unsubscribe link in our emails or by contacting us. Withdrawing consent does not affect processing carried out before withdrawal.
5. Who we share your data with
We do not sell your personal data. We may share it with:
- Service providers who help us run the waitlist and communicate with you, acting as our data processors under written contracts and only on our instructions.
- Authorities or advisers where required by law, regulation, or to establish, exercise, or defend legal claims.
- A successor in the event of a reorganisation, merger, or transfer of our business, subject to this policy.
6. Transfers outside Kenya
Some of our service providers may process data outside Kenya. Where this happens, we take steps required by the DPA to ensure your data continues to receive an appropriate level of protection, including using providers bound by suitable contractual safeguards.
7. How long we keep your data
We keep waitlist data only as long as needed for the purposes above — generally until we open and for a reasonable period afterwards, or until you ask us to remove you, whichever is earlier. We then delete or anonymise it, unless we must retain it to meet a legal obligation.
8. How we protect your data
We apply appropriate technical and organisational measures to keep your personal data secure, including restricting access to those who need it and protecting information in transit and at rest. No method of transmission or storage is completely secure, but we work to safeguard your data and to address any incident in line with the DPA.
9. Your rights under the Data Protection Act
Subject to the DPA, you have the right to:
- be informed of how your data is used;
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion (erasure) of your data;
- object to, or request restriction of, certain processing;
- request portability of data you provided to us; and
- withdraw consent at any time.
To exercise any of these rights, contact us at privacy@ctrlaltwork.org. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at www.odpc.go.ke.
10. Children
This website and our waitlist are intended for adults (18 years and older). We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.
11. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date above. Material changes will be communicated where appropriate.
13. Contact us
Questions about this policy or your data? Email privacy@ctrlaltwork.org or hello@ctrlaltwork.org.