PRIVACY POLICY

We may process the following categories of personal data:

• Identification data: name, job title, company.
• Contact data: phone number, email address, company address.
• Operational data: requests, equipment specifications, commercial documents.
• Technical website data: IP address, cookies, log files, device identifiers.

We process personal data solely for lawful and transparent purposes:

• To enter into and perform contracts for the supply of equipment and services (legal basis: contract).
• To comply with legal and tax obligations (legal basis: law).
• To ensure information security and prevent fraud (legal basis: Company’s legitimate interest).
• To communicate with clients and respond to inquiries (legal basis: legitimate interest).
• Marketing communications — only with your explicit consent.

We may share data only with partners necessary for contract execution, including:

• equipment suppliers and logistics agents,
• service contractors,
• IT providers and hosting partners,
• consultants and insurance companies.

All third-party partners are bound by confidentiality and data protection obligations.

We may transfer personal data outside Kenya (e.g., to equipment manufacturers in China or Europe) only when:

• adequate data protection safeguards are in place,
• your prior consent has been obtained,
• or when necessary for contract performance (e.g., equipment supply agreements).

Personal data is retained only for as long as necessary:

• contractual and accounting records — for the minimum periods required by law;
• client data — until the completion of business relations or withdrawal of consent;
• technical logs and cookies — in accordance with our Cookie Policy.

Under Kenyan law, you have the right to:

• obtain information about your personal data,
• request access, correction, or deletion of your data,
• object to processing (including marketing),
• request data portability,
• withdraw previously given consent.

All requests are processed free of charge within the timeframe set by law.

The Company takes all reasonable administrative, technical, and organizational measures to safeguard personal data, including:

• access control and permission levels,
• data encryption during transmission,
• backup and loss prevention systems,
• user activity logging.