Cookie Notice
Last updated: 29 October 2026 Operated by: Ian Dullu Jillo, trading as Dullu Group Enterprises, Kilifi, Kenya (contact: hello@dullugroup.co.ke)
1. What this notice is about
This notice explains what this website, ddi.dullugroup.co.ke ("the website"), stores on your device, and what it does not. Some stored information can be personal data under the Data Protection Act, 2019, so we tell you before we use it (DPA ss. 25, 29).
2. Cookies
The website itself does not set cookies. The only cookie you may see is a security cookie from our hosting provider, described in section 3. The website measures visits with a small counter that runs on our own server, uses no cookies and shares nothing with advertisers. It runs no advertising or marketing trackers and no social media pixels. Because of that there is no cookie banner to accept or reject. If your browser sends a Do Not Track or Global Privacy Control signal, the counter does not measure your visit.
3. What is stored in your browser
| Item | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| cf_clearance (cookie) | Cloudflare, our hosting provider | Set only if Cloudflare shows you a security check to tell people from automated traffic. It remembers that you passed, so you are not asked again | strictly necessary (security) | up to 1 year |
| ddi-lead (session storage) | this website | Remembers your answers in the enquiry popup so you do not have to type them again if you close it | strictly necessary | until you close the browser tab |
| ddi-sid (session storage) | this website | A random code that lets our own counter group one visit's page views together, with no name or IP address attached | visit measurement (no cookie) | until you close the browser tab |
| ddi-attr (session storage) | this website | Remembers which site or campaign link brought you here, so we can tell which campaigns bring enquiries | visit measurement (no cookie) | until you close the browser tab |
You can clear these at any time by closing the tab or clearing your browser data. The popup answers stay on your device and are sent to us only when you press the final send button. The visit counter sends us the page, the campaign tags and the code above, and the country is read from the connection by our hosting provider.
4. Third parties
The website loads its fonts from Google Fonts. When a page loads, Google receives your network address and your browser details, as with any file hosted by a third party. Google does not set cookies through this request. Our hosting provider, Cloudflare, delivers the website, may process technical data such as your network address to keep the site secure, and sets the security cookie in section 3 when it runs a security check. It needs no consent because it is strictly necessary to keep the website secure. See our Privacy Policy for how data may be transferred outside Kenya under DPA ss. 48-49.
5. If this changes
If we add advertising or marketing trackers (for example an ad pixel) we will update this notice first and ask for your consent before using them (DPA s. 32; General Regulations reg. 4). Rejecting will be as easy as accepting.
6. Your rights
You have the rights in DPA s. 26, including access, objection and correction. Contact hello@dullugroup.co.ke. You may also complain to the Office of the Data Protection Commissioner (DPA s. 56).