Who we are

Rylo Agency (trading as Rylo Agency) is a web development and digital marketing agency based in Addis Ababa, Ethiopia. We are the data controller for the personal data described on this page.

The law we work under

We are established in Ethiopia, so we are subject to the Personal Data Protection Proclamation No. 1321/2024, which came into force on 24 July 2024. It applies to us whether the processing happens inside or outside Ethiopia.

Where we work with clients or visitors in the European Economic Area or the United Kingdom, we also apply the standards of the GDPR and UK GDPR to that data. Where the two differ, we apply whichever gives you more protection.

What we collect, and why

When you use the contact form

We collect your name, email address, company name, budget range, the services you selected and your message. We use it only to reply to your enquiry and, if you become a client, to carry out the work. We do not sell it, and we do not add you to a marketing list without asking you separately.

When you book a call

The booking calendar is run by Cal.com. To hold the appointment we collect your name, email address, phone number, the service you selected and, if you give it, your website address, along with the time you chose and your timezone. We use it to prepare for the call, to attend it, and to reach you if something changes. If you tick the optional marketing box we also add you to our mailing list — that box is never ticked for you, and leaving it blank does not affect your booking.

When you browse the site

If you consent to analytics and advertising cookies, we collect standard usage data — pages viewed, approximate location by country, device and browser type, and how you reached the site. If you decline, we do not collect it. See our Cookie Policy for exactly what is set and by whom.

What we never ask for

We do not collect payment card details through this website, and we do not collect sensitive categories of personal data such as health, religion, or political opinion.

Our lawful basis

  • Consent — analytics and advertising cookies. You give it through the cookie banner and can withdraw it at any time.
  • Steps prior to a contract — replying to an enquiry you sent us, and arranging and holding a call you booked.
  • Consent — marketing emails, and only if you ticked the box when booking. It is separate from the booking itself, and you can withdraw it from any email we send.
  • Contract — delivering work you have engaged us for.
  • Legitimate interests — keeping the site secure and working. We do not rely on legitimate interests for advertising.

Who else sees your data

We keep the list of third parties deliberately short. As of the date above, they are:

  • Formspree — receives and forwards contact form submissions.
  • Cal.com — runs the booking calendar. It receives everything you type into the booking form, and it connects to our own calendar to find free slots.
  • Google Sheets and Google Apps Script — when a booking is made, the details above are copied into a private spreadsheet we use to keep track of enquiries. This is a different use of Google from the advertising and maps below.
  • Google (Ads, and Maps on the contact page) — only where you have consented to advertising or analytics cookies.
  • Google Fonts and jsDelivr — serve fonts and a JavaScript library. These do not set cookies, but loading them discloses your IP address to those providers. This is necessary for the page to render.
  • Our hosting provider — stores and serves the site, and keeps standard server logs.

We do not sell personal data, and we do not share it with data brokers.

Data leaving Ethiopia

The providers above are based outside Ethiopia, so your data may be processed abroad. Proclamation 1321/2024 regulates cross-border transfers of personal data. We only use providers that offer recognised safeguards, and we keep what we send them to the minimum needed to run the service.

How long we keep it

  • Enquiries and bookings that do not become work — up to 24 months, then deleted, including the row in the enquiry spreadsheet.
  • Marketing list — until you unsubscribe, after which we keep only the fact that you opted out, so we do not contact you again by mistake.
  • Client records — for the duration of the engagement, plus the period Ethiopian tax and accounting rules require us to keep records.
  • Analytics data — as configured in the relevant Google product, and only where you consented.

Your rights

Under Proclamation 1321/2024, and under the GDPR where it applies, you can ask us to:

  • tell you what personal data we hold about you, and give you a copy;
  • correct anything inaccurate;
  • delete your data, where we have no continuing obligation to keep it;
  • restrict or object to how we use it;
  • withdraw consent for cookies at any time, without affecting anything done beforehand.

Email info@rylo.agency and we will respond within 30 days. There is no charge. If you are not satisfied with our response, you can complain to the supervisory authority responsible for data protection in Ethiopia, or to your local authority if you are in the EEA or UK.

Security

The site is served over HTTPS. Access to enquiry data is limited to the people who need it to reply to you. No system is perfectly secure, and we will not claim otherwise — if a breach occurs that presents a risk to you, we will notify you and the relevant authority as the Proclamation requires.

Children

This site is aimed at businesses. We do not knowingly collect personal data from children. If you believe a child has sent us data, contact us and we will delete it.

Changes

If we change this policy we will update the date at the top. If a change materially affects how we use data you have already given us, we will contact you directly rather than rely on you noticing.