Legal
Privacy notice
Last reviewed 29 August 2026
Who we are
AfriCAN Do! is a programme of Branded Restaurants & Retail Africa Ltd, which is the data controller for this website. You can reach us at leonard.mudachi@brral.ke.
What we collect from you
Only what you type into one of our forms: your name and email address, and — depending on the form — your business name, sector, links you choose to share, and whatever you write in the message field.
That is all. This site sets no cookies at all, uses no advertising or cross-site trackers, and currently runs no analytics of any kind. If we add traffic measurement later it will be cookieless and will not identify you, and we will say so here before it goes live.
The guest directory
The Marketplace lists 35 people who have appeared as guests on the podcast. For most of them we publish a name, a sector, and the business they came on to talk about. We did not collect that from a form — it comes from the episode itself and from our own records of the conversation.
Our lawful basis is legitimate interest: these are people who agreed to a recorded public interview about their business, the directory exists to send attention and custom towards that business, and what we publish is limited to what they already discussed publicly on the show. We publish no contact details, no personal address, and no information about anyone's private life.
Where we have not been able to confirm what someone is building, we leave the profile deliberately incomplete and say so on the page rather than describe a person's business in words they did not choose.
If you are a guest and you want your profile corrected, expanded, or taken down entirely, email leonard.mudachi@brral.ke and we will do it. You do not need to give a reason to have it removed, and we will not ask you for one.
Why we collect it
To reply to you, and to keep the directory accurate. That is the whole purpose. We do not sell it, rent it, or use it for marketing you did not ask for.
How long we keep it
The website itself stores nothing. A form submission is validated, emailed to us, and discarded — it is never written to a database. What remains is the email in our inbox, which we keep for as long as the conversation is live and then delete.
Directory entries stay published while the episode is public, or until the guest asks us to remove theirs.
Who else sees it
Two processors, and no one else. Cloudflare, Inc. hosts this site and handles the request. Resend delivers the email to us. Neither uses your information for their own purposes, and we do not share it with anybody else.
Watching an episode on YouTube or Spotify happens on their platforms, under their privacy policies, not ours. We embed nothing that tracks you before you choose to go there.
Where it goes
Both of those providers are based in the United States, so submitting a form means your name, email address and message are transferred outside Kenya in order to reach us.
Sections 48 and 49 of the Data Protection Act No. 24 of 2019 permit that transfer where it is necessary to perform a contract or to take steps at your request before entering one — which is what replying to your enquiry is — and where appropriate safeguards are in place. Both providers are contractually bound to process the data only on our instructions.
If you would rather your information did not leave Kenya, email us directly at leonard.mudachi@brral.ke instead of using a form.
Your rights
Under the Data Protection Act No. 24 of 2019 you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we are using it.
Email leonard.mudachi@brral.ke and we will respond. If you are not satisfied with our answer, you have the right to complain to the Office of the Data Protection Commissioner.
Security
The site is served over TLS. Form submissions are validated on our server as well as in your browser, and are checked for automated abuse. We publish a vulnerability disclosure policy and act on reports.