01. Who We Are
This is the personal technical portfolio of Harrison Ndeke, Co-Founder & Systems / AI Lead at HarLyn Digital Partners ↗. This portfolio website is hosted at harrisonndeke.co.ke.
You can contact Harrison directly via email at ndekeharrison8@gmail.com, via HarLyn at info@harlyndigitalpartners.co.ke, or by phone/WhatsApp at +254 792 185 625 or office WhatsApp at 0184328180.
Under Kenya's Data Protection Act (KDPA) 2019, Harrison Ndeke is the data controller for personal data submitted through this personal portfolio. A data controller is the person or entity who decides why and how personal data is collected and used.
02. What We Collect
We collect only what has been verified in this site's actual codebase. This portfolio operates on minimal data collection by design:
- Direct Inquiries: When you contact Harrison via the email brief link, telephone, or WhatsApp, you choose to provide your contact details (name, email address, phone number) and the details of your automation project brief.
- Mission Control Assistant:Messages you submit to the on-site AI assistant are processed during your visit to provide answers about Harrison's stack, availability, and published case studies.
- Client-Side Utilities (Transmission Lab): The interactive project router runs 100% inside your browser using client-side JavaScript. Your inputs are never transmitted to or stored on any server.
- Basic Technical Server Requests: Standard HTTP request data (such as IP address, browser user-agent, and requested route) processed automatically by our hosting platform (Vercel) to deliver web pages securely and apply rate limits.
- Google Publisher Script: An asynchronous script (
publisher.js) loaded for Google News publication verification.
03. Why We Collect It
Each item of data collected is used solely for a specific, transparent purpose:
- Direct inquiries: To evaluate your project requirements, schedule technical discovery discussions, and respond to your messages.
- Assistant messages: To generate relevant answers to your questions about Harrison's engineering background and portfolio projects.
- IP-based rate limiting: To protect the assistant API against automated spam and denial-of-service abuse.
- Edge server requests: To route and deliver web content over encrypted HTTPS connections.
04. What We Do NOT Do With Your Data
We do not sell, rent, or trade your personal data with third-party data brokers or marketing lists.
Visitor information is shared only with verified technical infrastructure providers strictly needed to run this portfolio:
- Vercel Inc. — Edge hosting, DNS routing, and serverless compute infrastructure.
- NVIDIA NIM API — Provides live inference for the Mission Control Assistant. Conversation messages are passed ephemerally to generate answers and are not saved in a persistent database.
05. How We Protect It
We treat security as an architectural requirement:
- All web traffic and API routes enforce TLS 1.3 encryption in transit (HTTPS).
- The Mission Control Assistant operates in client memory without saving chat transcripts to browser cookies or local storage.
- In-memory rate limiting prevents unauthorized high-volume request bursts.
- API secrets and environment keys are secured in encrypted hosting vaults with zero client exposure.
No digital system connected to the internet can claim 100% impenetrable security, but we apply rigorous, defense-in-depth engineering practices to protect your communications.
06. How Long We Keep It
We keep personal data only for as long as necessary:
- Inquiry messages: We keep enquiry data only while the conversation and project scoping are active and delete it when you ask us to. (Fixed retention period: founder to confirm).
- Assistant conversations: Held ephemerally during your session and discarded when the response stream completes.
07. Your Rights Under KDPA 2019
As a data subject(the individual whose personal data is processed), you have specific statutory rights under Part IV of Kenya's Data Protection Act 2019:
- Right to access: Ask what personal data we hold about you.
- Right to correction: Request correction of inaccurate, outdated, or incomplete personal data.
- Right to deletion: Request the deletion or purging of your personal records.
- Right to object: Object to the processing of your personal data.
- Right to complain: Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya (odpc.go.ke).
To exercise any of these statutory rights, email ndekeharrison8@gmail.com or info@harlyndigitalpartners.co.ke.
08. Cookies & Tracking
This website uses zero advertising cookies, zero marketing trackers, zero Meta Pixel, and zero invasive third-party telemetry.
Only strictly essential HTTP routing headers and session identifiers used by our hosting platform (Vercel) to serve assets securely are utilized.
09. Client Project Data is Separate
This website policy applies specifically to this public portfolio.
When a client enters into a paid engineering engagement or assessment through HarLyn Digital Partners, all enterprise client source code, databases, API credentials, and proprietary systems are governed by that engagement's formal Non-Disclosure Agreement (NDA), Master Services Agreement (MSA), and Data Processing Agreement (DPA), not just by this public portfolio policy.
10. Children
This website is created for software engineers, business executives, and adult professionals. We do not knowingly collect personal data from anyone under the age of 18.
11. Changes & Effective Date
We may update this policy periodically; the current version is always published directly on this page at https://harrisonndeke.co.ke/privacy-policy.
Effective from: 30 October 2026 · Status: Draft awaiting advocate review.
12. Link to Company Policy
For HarLyn Digital Partners' services, 48-Hour Assessment Sprints, and company infrastructure, see the company's Privacy Policy at https://www.harlyndigitalpartners.co.ke/privacy-policy ↗.