How CromaHR uses cookies and similar technologies, and how you can accept, reject or withdraw your consent at any time.
Effective date: 11 September 2026 · Version 1.0
This Cookie Policy explains how Croma Interactive Limited (“Croma”, “we”, “us” or “our”) uses cookies and similar technologies when you visit our website at cromahr.com, use our free calculators and guides, or sign in to the CromaHR application at app.cromahr.com (together, the “Services”).
It tells you what these technologies are, why we use them, which ones are optional, and how you can accept, refuse or withdraw your consent at any time. It should be read together with our Privacy Policy and Terms of Service, which explain more generally how we collect and use personal data.
Croma Interactive Limited is a company incorporated in Kenya with its registered office at Piano House, 8th Floor, Brookside Drive, Westlands, Nairobi, and is registered with the Office of the Data Protection Commissioner (ODPC) as a data controller and data processor.
A cookie is a small text file that a website places on your computer, phone or tablet when you visit it. Cookies let a website recognise your device, remember information about your visit, and see how the site is being used.
We also use technologies that work in a similar way, and this policy covers them too:
First-party cookies are set by us, on our own domain. Third-party cookies are set by another organisation — for example an analytics provider — whose service we use on our website. Third parties that set cookies through our Services process the resulting data under their own privacy policies, which are linked in section 5.
Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a fixed period, shown in the tables in section 5, or until you delete them.
We are based in Kenya, and our use of cookies is governed principally by the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021. Where a cookie collects personal data, we rely on one of the following lawful bases:
CromaHR serves employers across Africa. We design our cookie practices to meet the consent standard of the Kenyan Act and to be consistent with the data protection laws of the other markets we serve, including Uganda, Tanzania, Ghana, Nigeria, Rwanda, Zambia, South Africa, Sierra Leone and Liberia. Where a visitor is protected by a law that gives them additional rights, we will respect those rights.
We group the cookies and similar technologies we use into four categories:
The tables below list the cookies and similar technologies used on our Services. Durations are the maximum period the cookie remains on your device unless you delete it sooner.
| Cookie | Purpose | Duration |
|---|---|---|
| cromahr_session | Maintains your signed-in session in CromaHR | Session |
| cromahr_cookie_consent | Records your cookie consent choice | 12 months |
| Cookie | Purpose | Duration |
|---|---|---|
| cromahr_calc_country | Remembers the country you last selected in a calculator | 30 days |
| cromahr_calc_inputs | Saves the figures you entered in a calculator so they persist on reload | 30 days |
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics — distinguishes unique visitors | 2 years |
| _gid | Google Analytics — distinguishes unique visitors per day | 24 hours |
We configure Google Analytics with IP anonymisation and a data retention period of 14 months, and we do not use it to identify individual visitors. Google's privacy policy is available at policies.google.com/privacy.
| Cookie | Purpose | Duration |
|---|---|---|
| _fbp | Meta Pixel — delivers ads to people who have visited our site | 90 days |
| li_fat_id | LinkedIn Insight Tag — measures ad performance and audience | 30 days |
Meta's privacy policy is at facebook.com/privacy/policy and LinkedIn's cookie policy is at linkedin.com/legal/cookie-policy.
When you first visit cromahr.com, a cookie banner explains that we use cookies and offers choices:
Until you make a choice, only strictly necessary cookies are set. No category is pre-ticked. We keep a record of each consent decision — what was chosen, when, and against which version of this policy — so that we can demonstrate it if asked. We ask again after 12 months, or sooner if we make a material change to the cookies we use.
You can change your choices at any time by selecting “Cookie settings” in the footer of any page on cromahr.com. Withdrawing consent stops the relevant cookies being set from that point on; it does not affect processing that took place before you withdrew.
Most browsers let you view, block and delete cookies. Blocking all cookies, including strictly necessary ones, will stop you signing in to CromaHR and may affect other parts of the website.
There is no agreed standard for responding to “Do Not Track” browser signals, so our website does not change its behaviour in response to them. Your choices in our cookie banner are always respected. Where your browser sends a Global Privacy Control signal, we treat it as a refusal of marketing cookies.
Cookies stay on your device for the durations shown in section 5. Information collected through analytics and marketing cookies is kept by us, or by the provider on our behalf, only for as long as needed for the purpose it was collected for, and in any case no longer than the retention period configured for that tool. Consent records are kept for the life of the consent plus a reasonable period to demonstrate compliance.
Some of the providers whose cookies we use, including Google, Meta and LinkedIn, may process information on servers outside Kenya. Where this happens, we only transfer personal data in line with the requirements of the Data Protection Act, 2019 on cross-border transfers — for example, where the provider offers appropriate safeguards for the protection of personal data, or where you have consented to the transfer after being informed of the possible risks.
This policy covers cookies on our website and the sign-in and operation of the CromaHR application. It does not cover the employee, payroll and HR records that our customers store in CromaHR. We process that information on behalf of our customers, as their data processor, under our customer agreement and data processing terms. If you are an employee of one of our customers and have a question about your records, please contact your employer first.
Our Services are designed for businesses and are not directed to children. We do not knowingly use cookies to collect information from anyone under the age of 18.
Under the Data Protection Act, 2019, you have the right to:
To exercise any of these rights, contact us using the details in section 14. If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner at odpc.go.ke, or with the data protection authority in your own country.
We will update this policy when we add, remove or change the cookies we use, or when the law changes. The effective date at the top shows when it was last updated. If a change is material — for example, a new category of cookie — we will ask for your consent again through the cookie banner before the new cookies are set.
For any question about this policy or our use of cookies, please contact our Data Protection Officer:
Croma Interactive Limited
Piano House, 8th Floor, Brookside Drive, Westlands, Nairobi