Last Updated: August 8th, 2025

Esaya Creations Inc. (“we,” “our,” “us”) is committed to protecting the privacy of individuals who interact with us. This Privacy Policy explains how we collect, use, store and protect your information in accordance with applicable privacy laws, including the U.S. Federal and State privacy laws (e.g., CCPA) and the European Union General Data Protection Regulation (GDPR).

1. Information We Collect We may collect the following personal data directly from you when you contact us:

Name, company name, email address, phone number.

Business proposals, pitch decks and related materials.

Any other information you choose to provide in your communications.

We do not automatically track visitors using cookies for marketing purposes.

2. Legal Basis for Processing (GDPR)

If you are located in the EU/EEA, we process your personal data under the following legal bases:

Consent: When you voluntarily provide your information.

Legitimate interest: For evaluating investment opportunities and communicating with you.

Legal obligation: When required to comply with applicable laws.

3. How We Use Your Information

Your data will be used for:

Reviewing business proposals and potential investment opportunities.

Communicating with you about your submission.

Maintaining internal records related to investment reviews.

Meeting legal and regulatory obligations in the U.S., Kenya and other jurisdictions.

4. Sharing & Disclosure

We do not sell or rent your information.

We may share information only:

With our affiliates, trusted advisors and consultants assisting in evaluations.

When required by law, court order or regulatory authority.

In connection with mergers, acquisitions or restructuring of our company.

5. International Data Transfers

We operate in both the United States and Africa and your data may be transferred between jurisdictions.

When transferring data from the EU/EEA to countries without an adequacy decision, we implement Standard Contractual Clauses (SCCs) or other lawful mechanisms under GDPR.

6. Data Retention

We keep your personal data only as long as necessary to fulfill the purpose for which it was collected or as required by law. After this period, your data will be securely deleted.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access and receive a copy of your personal data.

Request correction or deletion of your personal data.

Restrict or object to processing.

Withdraw your consent at any time.

Request data portability (GDPR).

Opt out of the sale of personal information (CCPA, if applicable).

You can exercise these rights by contacting us at info@esayacreations.com

8. Security

We use industry-standard security measures to protect your data. However, no internet-based method is 100% secure and we cannot guarantee absolute protection.

9. Contact Information If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

📍 United States: Dallas, Texas, USA

📍 Africa: Nairobi, Kenya

E-Mail: compliance@esayacreations.com