Privacy Policy

1. Who is responsible for your data

BEEKAY GLOBAL is a trading brand operated in Kenya by the registered proprietor of the business name Destiny Capsules. For the personal data described here, that proprietor, trading as BEEKAY GLOBAL, determines the purposes and means of processing and acts as the data controller unless another provider explains that it acts as an independent controller. Privacy requests may be sent to support@drbeekayglobal.com.

This policy applies to drbeekayglobal.com, BEEKAY GLOBAL accounts, Insights membership, BKAI, eBooks, courses, lectures, free resources, engagement enquiries and related support. It does not govern an external site once you leave BEEKAY GLOBAL.

2. Information we collect

• Account data: email address, securely hashed password, verification and password-reset status, access status and sign-in security records. We do not store your password in readable form.
• Order and access data: name where required, account email, product, price, currency, Paystack reference, payment status, entitlement, delivery status, accepted policy version and time, and support history. BEEKAY GLOBAL does not receive or store your complete card number, card security code, M-PESA PIN or mobile-money credentials.
• Learning and engagement data: course enrolment information, resource claims, enquiry details, organisation or role, chosen service, focus area, message, opaque booking reference, Calendly event and invitee references, booking status and scheduled time.
• BKAI data: the question you submit and up to ten recent messages that your browser sends to continue the conversation; selected BEEKAY GLOBAL source material; and account-linked usage metadata such as question counts, character and token totals, model used, dates, credit balances and optional helpful/not-helpful feedback.
• Technical and security data: essential session cookies, short-lived checkout bindings, country code used to offer the appropriate payment route, and pseudonymous or hashed request fingerprints used for rate limiting, fraud prevention and security.

3. Why we use it

We process data to create and secure accounts; verify payments; deliver purchases; administer subscriptions and credits; answer enquiries; arrange bookings; provide BKAI responses; prevent fraud and abuse; keep financial and access records; improve reliability; comply with law; and establish, exercise or defend legal claims.

Depending on the activity, the lawful basis is performance of a contract or steps you request before a contract, your consent, compliance with a legal obligation, or a legitimate interest that does not override your rights. Optional direct marketing is sent only after an express choice to receive it, identifies the sender and provides a clear, simple and free way to opt out. Withdrawing marketing consent does not stop necessary account, payment, access, security or service messages.

4. BKAI conversations

BKAI sends your current question, recent browser-provided conversation context and relevant BEEKAY GLOBAL sources to OpenAI through its business API so an answer can be generated and safety-checked. The response-generation request uses store: false, disabling application-state storage for that response. BEEKAY GLOBAL does not save prompt or answer text in its customer database. The visible conversation is kept only in the current browser page, is not intentionally persisted by BEEKAY GLOBAL, and can be removed using Clear conversation or a full refresh.

BEEKAY GLOBAL records per-account usage metadata needed to administer allowances and credits, including question counts, input/output character and token totals, model used, dates and credit balances. Optional feedback records the rating and provider response identifier against the relevant account. OpenAI states that API inputs and outputs are not used for training by default unless the API customer opts in. Separate abuse-monitoring logs may retain content for up to 30 days, or longer where OpenAI is legally required to retain it. Do not enter confidential, privileged, safeguarding, medical, financial, identity or other sensitive personal information into BKAI.

5. Service providers and international processing

Only providers needed to operate a selected service receive the relevant data. These may include Paystack for payment processing; Systeme.io for course or lecture enrolment and delivery; OpenAI for BKAI responses and safety screening; Calendly for bookings; Resend for transactional email; and hosting, database and file-storage infrastructure supporting the site.

Some providers process data outside Kenya. Before such processing is used, BEEKAY GLOBAL must identify and document the applicable transfer basis, destination, necessity and safeguards required by Kenyan law, and limit the transfer to information needed for the selected service. A provider contract, service convenience or this notice alone does not establish a lawful transfer basis. Where explicit consent is relied upon, the relevant risks and safeguards must be explained; sensitive personal data is transferred only where the additional legal conditions are satisfied. Each external provider also publishes its own privacy information.

6. Cookies and local browser data

The site uses essential cookies for secure sign-in, email verification, checkout binding and delivery of purchased access. These are not advertising cookies. BKAI conversation text and private diagnostic answers are held in the active browser experience rather than saved as a customer profile.

The homepage currently loads selected editorial images from Unsplash, which can receive ordinary request data such as IP address, browser information and the referring page. An embedded Calendly calendar can likewise receive browser and device data when it loads and displays Calendly’s own privacy choices. Payment, learning, video, social and booking services may use their own cookies or similar technologies when their content or destinations are opened.

7. Retention

We keep data only for as long as reasonably necessary for the stated purpose, security, dispute handling and legal obligations. Transaction and accounting records are retained for the period required by applicable tax, payment and record-keeping rules. Account records remain while the account is active and for a reasonable period afterward. Enquiry retention depends on follow-up, dispute, security and legal needs. Verification and reset links expire automatically; rate-limit records are short-lived.

A deletion request may not require removal of records that must be preserved for tax, payment, fraud-prevention, contractual or legal-claim purposes. Where deletion is not possible, processing will be restricted to the necessary purpose.

8. Security

Safeguards include password hashing, secure and HTTP-only session cookies, email-verification controls, limited-use action tokens, server-side payment verification, rate limiting, restricted administrator access, expiring eBook links and data minimisation. No internet system is risk-free; report a suspected account or data incident promptly without emailing passwords or payment credentials.

9. Your choices and rights

Subject to applicable law, you may ask to be informed about processing; access your personal data; correct inaccurate data; object to or restrict processing; request deletion where lawful; and receive portable data where applicable. You may also withdraw consent without affecting processing already lawfully completed.

You may also object to a decision based solely on automated processing that has legal or similarly significant effects and request meaningful information and human reconsideration. BKAI is not authorised to make such decisions.

Send a request to support@drbeekayglobal.com from the relevant account email. We may take proportionate steps to verify identity. If a concern is not resolved, you may complain to the Office of the Data Protection Commissioner of Kenya.

10. Children

You must be at least 18 to create a BEEKAY GLOBAL account, purchase or use BKAI. A minor may read suitable public educational material with appropriate parent or guardian involvement. We do not knowingly invite children to submit sensitive information or payment credentials. Contact us if you believe a child’s data has been collected inappropriately.

11. Changes and legal framework

Material changes will be dated and, where required, communicated or presented for renewed acceptance before a new transaction. This policy is informed by the Kenya Data Protection Act, 2019. The Act and other applicable law prevail where they provide a mandatory right or obligation.