Privacy Policy
Viko Marketing Agency ("Viko") | Last updated: 24 October 2026 | info@vikoredditexperts.com
Jump to a section
1. Who we are and what this policy covers
1.1 Viko Marketing Agency ("Viko", "we", "us", "our") is a Reddit marketing agency based at 01 Kenyatta Avenue, Nairobi, Kenya. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it, and the choices and rights you have.
1.2 It applies to personal information we collect through our website, when you contact us (by form, email, WhatsApp or a booked call), and when you buy or receive our services. It should be read together with our Terms and Conditions.
1.3 For the personal information described in this policy, Viko is the "data controller" (the party that decides how and why the information is used). When we handle personal information on behalf of a client as part of a service, we act as a "data processor" and follow the client's instructions, as described in section 11.
1.4 We handle personal information in line with the Kenya Data Protection Act, 2019, and, where it applies to you, other data protection laws such as the EU and UK General Data Protection Regulations (GDPR).
2. Information we collect
2.1 Information you give us. This includes:
- Contact details: your name, email address, phone or WhatsApp number, company name and job title when you fill in our contact form, book a call, or message us;
- Enquiry and project details: the content of your messages, the details of your project, and any goals, budgets, brand information or files you share;
- Billing information: billing name, company details, invoice and bank-transfer records. We do not ask for or store card numbers;
- Onboarding information: information you give us during onboarding, such as brand guidelines, product information, topics to avoid, and approval contacts;
- Communications: records of calls, emails, WhatsApp chats, feedback and approvals, and testimonials you agree to share.
2.2 Information collected automatically. When you visit our website we, and the tools we use, may collect your IP address, device and browser type, operating system, language, pages viewed, time spent, referring website, approximate location (such as city or country), and how you interact with buttons and forms. See section 5 on cookies and analytics.
2.3 Information from other sources. We may receive information about you from the scheduling, messaging, email or payment tools you use to contact or pay us, from public sources such as your company website or professional profile, and from referrals.
2.4 Client access and credentials. If you are a client and you give us access to an advertising account, analytics account, brand account or similar system, we handle the access details and the account data that we can see through that access, as described in section 11.
2.5 Sensitive information. We do not ask you for sensitive personal information (such as health, religion, ethnicity, political opinions, biometric data or criminal records). Please do not send it to us. If you do, we will use it only to deal with your request and delete it when we no longer need it.
3. How we use your information and why
3.1 We use personal information only for specific purposes and only when we have a lawful reason to do so. The table below summarizes them.
| Purpose | Examples | Lawful basis |
|---|---|---|
| Respond to enquiries and book calls | Replying to forms, WhatsApp and email; scheduling strategy calls | Steps at your request before a contract; our legitimate interests |
| Provide our services | Onboarding, research, drafting, publishing, reporting, client communication | Performance of a contract |
| Billing and accounting | Invoices, payment records, tax and bookkeeping | Performance of a contract; legal obligation |
| Improve our website and services | Understanding which pages and offers work, fixing errors, testing improvements | Our legitimate interests; consent where required for cookies |
| Security and fraud prevention | Protecting our website, accounts and systems; detecting misuse | Our legitimate interests; legal obligation |
| Marketing communications | Occasional updates and insights, only if you opted in or are an existing client | Consent; legitimate interests where the law allows |
| Legal compliance and disputes | Responding to lawful requests, enforcing our Terms, defending claims | Legal obligation; our legitimate interests |
3.2 We do not sell your personal information. We do not use your information for automated decision-making that has legal or similarly significant effects on you.
4. Your consent
4.1 Where we rely on your consent (for example, for non-essential cookies or marketing emails), you can withdraw it at any time by using the settings or unsubscribe links we provide, or by emailing info@vikoredditexperts.com. Withdrawing consent does not affect processing that took place before you withdrew it.
7. International transfers
7.1 We are based in Kenya, and our service providers and clients may be located in other countries, so your personal information may be processed outside the country where you live, including in countries whose data protection laws differ from yours.
7.2 When we transfer personal information across borders, we take steps to protect it as required by law, such as using providers with appropriate security and contractual safeguards, relying on your consent where required, or using other lawful transfer mechanisms.
8. How long we keep information
8.1 We keep personal information only as long as needed for the purposes in this policy, and as required by law. Typical periods are:
| Information | Period | Reason |
|---|---|---|
| Enquiries and messages that do not become a client relationship | Up to 24 months after the last contact | Follow-up and record of conversation |
| Client records, onboarding information and communications | For the duration of the service and up to 6 years afterward | Service continuity, disputes, limitation periods |
| Invoices and payment records | As required for accounting and tax law, usually up to 7 years | Legal obligation |
| Website analytics data | Up to 26 months, or the shorter period set in the tool | Service improvement |
| Marketing contact details | Until you unsubscribe or ask us to delete them | Consent |
8.2 When information is no longer needed, we delete it or anonymize it so that it can no longer identify you. Client credentials and access are removed when a service ends, as set out in section 11.
9. Security
9.1 We use reasonable technical and organizational measures to protect personal information from loss, misuse, unauthorized access, disclosure and alteration. These include limiting access to those who need it, using strong and unique passwords and multi-factor authentication where available, encrypted connections (HTTPS) on our website, and confidentiality duties for our team.
9.2 No online system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information in a way that creates a risk to you, we will notify you and the relevant authority as required by law.
10. Your rights
10.1 Depending on where you live, you have rights over your personal information, which may include the right to:
- be informed about how we use your information (this policy);
- access the personal information we hold about you and get a copy;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information, in some circumstances;
- object to or ask us to restrict certain processing, including direct marketing;
- receive your information in a structured, commonly used format and have it transferred to another provider (data portability);
- withdraw consent at any time, where we rely on consent;
- not be subject to decisions based solely on automated processing that significantly affect you.
10.2 To use any of these rights, email info@vikoredditexperts.com. We may need to verify your identity first. We will respond within the time required by law, generally within 30 days, and will tell you if we need more time or cannot meet a request and why. We do not charge a fee unless a request is clearly unfounded or excessive.
10.3 Residents of California. We do not sell or share your personal information as those terms are defined under California law, and we do not knowingly use it for cross-context behavioral advertising. California residents may request access to, correction of or deletion of their information as described above.
11. Information we handle for clients
11.1 When we deliver services, we may handle personal information on a client's behalf, such as comments and messages from Reddit users, performance data from advertising dashboards, or contact details supplied by the client. In that case the client is the controller and decides what we do with the information, and we process it only to deliver the services, on their instructions.
11.2 We keep client credentials and access to client accounts secure, use them only for the agreed services, and delete or hand them back when the service ends, as described in our Terms and Conditions. Clients can remove our access at any time.
11.3 We can enter into a data processing agreement with a client on request.
12. Public Reddit content
12.1 Posts and comments we publish on Reddit for our clients are public. They are visible to anyone, may be copied or indexed by search engines and AI tools, and are governed by Reddit's own terms and privacy policy. We do not control how Reddit or third parties use public content.
12.2 When we research communities, we review public posts and comments to understand topics and needs. We use this research for analysis and do not build profiles of individual Reddit users or contact them privately for marketing.
13. Marketing messages
13.1 We may send you updates, insights or offers by email or messaging if you asked for them or are a current or recent client, as the law allows. Every marketing email includes a way to unsubscribe, and you can also tell us to stop at any time. We will still send service messages that are needed to manage an active contract, such as invoices and approvals.
14. Children
14.1 Our website and services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
15. Third-party links and tools
15.1 Our website may link to or embed third-party services, such as WhatsApp, LinkedIn, Reddit or a booking calendar. Those services have their own privacy practices, and we are not responsible for them. We encourage you to read their policies before sharing information with them.
16. Changes to this policy
16.1 We may update this policy from time to time, for example when our services, tools or the law change. The latest version will always be on our website with a new "Last updated" date. If we make a material change, we will tell you through the website or by email where appropriate.
17. Contact and complaints
17.1 If you have questions about this policy or want to use your rights, contact us:
- Email: info@vikoredditexperts.com
- WhatsApp: +254726979973
- Address: Viko Marketing Agency, 01 Kenyatta Avenue, Nairobi, Kenya
17.2 If you are not satisfied with our response, you have the right to complain to the data protection authority in your country. In Kenya, this is the Office of the Data Protection Commissioner (www.odpc.go.ke). If you are in the European Economic Area or the United Kingdom, you can contact your local supervisory authority. We would appreciate the chance to resolve your concern first.