Privacy notice

ZidiFlow is based in Nairobi, Kenya, and is responsible for the personal data described here. For any privacy question or request, email [email protected] with the subject “Privacy request”.

Last updated 9 October 2026.

• Opportunity submissionsOrganisation and opportunity details, any document you upload, and the name, email and phone number of your contact person. We use them to verify and publish the listing and to contact you about it. Contact details are never published.
• Clinic bookingsYour name, email and booking answers, the materials you send, and payment records. We use them to check for conflicts of interest, deliver the clinic, take payment and issue receipts.
• Digest and Insights subscriptionsYour email address, collected and stored by Substack to send you our publications.
• Emails you send usYour message and contact details, used to reply and to keep a record of the conversation.
• Website visitsAggregate visit statistics from Cloudflare Web Analytics, which does not use cookies or identify individual visitors.

We use the following services to run ZidiFlow. Some store data outside Kenya, under their own security and privacy terms.

• CloudflareWebsite hosting, security and visit statistics.
• Zoho MailOur team email, including clinic materials sent to us.
• FormSubmitDelivers opportunity submissions and confirmation emails.
• CalendlyClinic scheduling and booking confirmations.
• Google MeetClinic video calls.
• SubstackThe weekly digest and Insights.

• Clinic materialsDeleted within 90 days of the session, or sooner on request.
• Opportunity submissionsKept for up to 12 months after the opportunity closes.
• Payment records and receiptsKept for as long as Kenyan tax and accounting law requires.
• CorrespondenceKept for up to 24 months after our last exchange.

Access is limited to the ZidiFlow team, and team accounts are protected with two-factor authentication. We do not sell personal data or share it for advertising.

Under the Kenya Data Protection Act, 2019, you may ask to access, correct or delete your personal data, object to its processing, or withdraw consent you have given. Email us and we will respond within the time the law requires.

If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner.

This website does not set advertising or tracking cookies. Cloudflare may set strictly necessary cookies to protect the site. Calendly and Substack set their own cookies on their pages, under their own policies.