Privacy, in plain English.

Lantana Labs is a creative and consulting studio registered in Nairobi, Kenya. When we say "we", "us" or "Lantana Labs" in this document, we mean the entity responsible for the website at lantana-labs.com and the services we deliver to clients.

If you need to reach our team about anything in this policy, write to info@lantana-labs.com.

We collect the minimum we need to run the site, reply to you and deliver client work.

Information you give us

• Name, email, phone and company when you fill out a contact or brief form.
• Project details, brand assets and documents you share during an engagement.
• Messages you send us by email, WhatsApp or other channels we publish on the site.

Information collected automatically

• Basic server logs: IP address, browser type, pages visited, timestamps.
• Privacy-respecting analytics that tell us which pages are read — without building a profile of you.
• Strictly necessary cookies used to remember UI preferences (e.g. mobile menu state).

We use the information to:

• Reply to your inquiry, prepare a proposal and deliver the work you've engaged us for.
• Keep the site working, fast and secure.
• Improve what we publish and the services we offer, based on aggregate usage patterns.
• Meet our legal, accounting and tax obligations in Kenya and (where relevant) the jurisdictions our clients operate in.

We do not sell personal data. We do not use your data to train third-party AI models. We do not share your brief or project materials with anyone outside the team working on your engagement.

We use a small number of cookies — almost all strictly necessary for the site to function. Any analytics we run is configured to respect IP anonymisation and Do Not Track signals, and we don't use third-party marketing cookies to follow you around the internet.

You can clear cookies from this site at any time through your browser settings. Doing so won't break anything important.

We only share data with a small set of service providers that help us run the business:

• Email delivery and hosting providers (for messages you send us and for the site itself).
• Document, design and code tools used during an engagement (e.g. Figma, Google Workspace, GitHub).
• Accountants and legal advisors, where we're required to disclose information.

Every provider is contractually required to keep your data confidential and use it only for the purpose we've engaged them for.

We keep your contact details and project materials only as long as we need to deliver the work and to meet legal and tax record-keeping requirements — typically 7 years for invoices and formal contracts, and no longer than 24 months for general inquiries that don't become engagements.

You can ask us to delete your data earlier. If there is no legal reason to keep it, we will.

Under Kenya's Data Protection Act, 2019 — and equivalent laws like the GDPR if you're in the EU — you have the right to:

• Know what personal data we hold about you.
• Correct anything that's inaccurate.
• Ask us to delete your data.
• Object to us processing your data in certain ways.
• Get a portable copy of your data.

To exercise any of these rights, email info@lantana-labs.com. We aim to reply within 24 hours.

We use encrypted connections (HTTPS) across the site and require the same from our tooling providers. We review access to client files regularly and remove people from systems as soon as an engagement ends.

No system is completely safe. If a breach happens that affects your personal data, we will tell you and the Kenya Data Protection Commissioner without delay.

If we change this policy, we'll update the effective date at the top of the page. For material changes — anything that affects how we use your data — we'll also tell you directly if we have your email.

For day-to-day commercial terms, see our Terms of Service. For how we work with clients and the people around us, see our Promise of Commitment.