Privacy Policy

1. Introduction

Quite Bright Films Kenya Limited (“QBF”, “we”, “us”, or “our”) is a film production company registered in Kenya. We operate the website at qbf.co.ke (the “Site”). This Privacy Policy explains how we collect, use, and protect any personal information you provide when you use our Site or contact us through our enquiry form.

This Policy is governed by the Kenya Data Protection Act 2019. Where applicable, it also reflects the requirements of the EU General Data Protection Regulation (GDPR) for visitors accessing the Site from within the European Economic Area.

By using this Site, you acknowledge and accept the practices described in this Policy. If you do not agree, please discontinue use of the Site.

2. Information We Collect

We collect two categories of information:

Contact form data. When you submit an enquiry through our contact form, we collect your name, email address, project type (if provided), and the content of your message. Submission of this form is entirely voluntary.

Technical analytics data. Our Site uses Vercel Analytics to understand how visitors interact with our pages. Vercel Analytics operates without cookies and does not collect personally identifiable information. The data it processes is aggregated and anonymised, covering metrics such as page views and geographic region at a country level. No fingerprinting or cross-site tracking takes place.

We do not operate user accounts, process payments, or collect any sensitive personal data such as health, financial, or identity document information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• —To respond to your project enquiries and communicate with you about potential productions or services.
• —To improve our website based on aggregate, anonymised analytics insights.
• —To maintain records of business correspondence in line with our legal and operational obligations.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

Under the Kenya Data Protection Act 2019, we process your contact form data on the basis of legitimate interest (responding to a business enquiry you have initiated) and, where you have provided explicit consent by submitting the form, on the basis of consent.

For visitors accessing our Site from within the European Economic Area, we additionally rely on GDPR Article 6(1)(b) — processing necessary for the performance of or steps taken prior to entering a contract — as the legal basis for handling enquiry data.

5. Data Retention

Contact form submissions are retained for a maximum of 24 months from the date of submission, or until the enquiry is resolved and no further correspondence is reasonably expected — whichever is sooner. After this period, records are securely deleted.

Anonymised analytics data collected by Vercel Analytics is governed by Vercel's own data retention policies. As this data is not personally identifiable, it falls outside the scope of personal data retention obligations.

6. Third-Party Services

We use a small number of third-party services to operate this Site:

• —Vercel Analytics — provides anonymised, cookie-free site performance insights. Vercel processes data in accordance with its own Privacy Policy.
• —Resend — handles delivery of email notifications from our contact form to our internal team. Resend processes only the data contained in your form submission and operates under its own Privacy Policy.

We do not use third-party advertising platforms, social media tracking pixels, or any analytics services that set persistent cookies on your device.

7. International Data Transfers

Vercel, as our hosting provider and analytics service, may process data on servers located outside Kenya, including in the United States. Where such transfers occur, Vercel applies appropriate safeguards including standard contractual clauses and compliance with applicable data protection frameworks.

We do not knowingly transfer your personal data to countries that do not provide an adequate level of data protection without appropriate safeguards in place.

8. Your Rights

Under the Kenya Data Protection Act 2019, you have the following rights with respect to your personal data:

• —Right of access — to receive a copy of the personal data we hold about you.
• —Right to correction — to request that inaccurate or incomplete data be corrected.
• —Right to erasure — to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected.
• —Right to object — to object to the processing of your data where we rely on legitimate interest as our legal basis.

To exercise any of these rights, please email us at info@qbf.co.ke with the subject line “Data Request”. We will respond within 30 days of receiving your request.

9. Cookies and Analytics

This Site does not set any cookies on your device. Vercel Analytics, our analytics provider, is a cookie-free solution that uses no persistent identifiers, browser fingerprinting, or cross-site tracking. No cookie consent banner is displayed because none is required.

We do not use advertising cookies, third-party tracking pixels, or social media embeds that would result in data being collected by those platforms.

10. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, or loss. All data transmitted between your browser and our Site is encrypted via HTTPS. Access to contact form submissions is restricted to named members of our team who require access for legitimate business purposes.

While we endeavour to maintain strong security practices, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security.

11. Children's Privacy

This Site is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13 years of age. If you believe a child has submitted personal information to us, please contact us at info@qbf.co.ke and we will promptly delete such data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we use. Material changes will be communicated via a notice on this page. The effective date at the top of this Policy will be updated accordingly.

Continued use of the Site after any such changes constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.

13. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please contact us: