Privacy Policy

I. Introduction

Welcome to the Kakuzi PLC Privacy Policy. We are committed to protecting the privacy of those with whom we interact, and we recognise the need to respect and protect information that is collected or disclosed to us. Personal data means any information relating to an identified or identifiable natural person. This policy outlines how we collect personal data when you visit our website and informs you about your privacy rights.

II. Rights of data subject

Please contact us at mail@kakuzi.co.ke if you wish to exercise any of the rights below or if you have any queries related to your personal data. Subject to applicable laws/lawful purpose, you have the right to:

• Be informed of the use to which your personal data is to be put;
• Access your personal data which is in our custody;
• Receive any of your personal data in a structured, commonly used and easily accessible format;
• Request for any personal data in our possession to be corrected or updated;
• Request to have any personal data we have about you to be deleted to the extent permitted by applicable law;
• Request us to suspend the processing of your personal data for instance where a rectification or update is required;
• Object to processing of all or part of your personal data.

We may need to request specific information from you to ascertain your identity to establish your right to exercise the right requested or in the event that further information is required to process your request. We may also refuse to comply with your request where we determine that it is unfounded or has no legal basis.

III. How we collect and use personal data

We may collect, use, store or process the following personal data:

• Contact information includes address, email address and telephone number including your communication preferences;
• Identity information includes first name, maiden name, last name, title and username or similar identifier;
• Technical data includes internet protocol (IP) address, browser type and other technical information for internal use by our technical support staff;
• Usage data includes information about how you use our website, including our products and services where applicable.

We collect the personal data above through various means. In certain areas of the website, you can interact with authorized officials via email, provide confidential information through the whistleblowing portal or make general enquiries. You may also interact with us through various platforms via links provided on the website.

We may also ask you to provide further information to enable us to provide the assistance required. Providing any information requested is optional. However, failure to provide this information may hinder our ability to interact with you.

IV. How we use your personal data

Kakuzi’s use of your personal data is guided by the following principles:

• Respect for the right to privacy;
• Lawful, fair and transparent processing of data;
• Legitimate use of data i.e. for the purpose collected;
• Non- transferability outside Kenya except where we have obtained consent or we have guarantee of adequate data protection safeguards.

We will only use your personal data as permitted by data protection and privacy laws and only for the purpose which we collected it. We may also use your data for other reasons compatible with the original purpose. If we need to use your data for an unrelated purpose, we will notify you of our legal basis for doing so.

We only process your personal data with your consent or where processing is necessary: to perform a contract to which you are a party, to comply with our legal obligations, to protect your interests or those of another natural person, for our legitimate interests (in the interests of our business) or those of a third party and for record keeping.

Where we process your data for legitimate interests, we will not proceed if the processing is unwarranted having regard to the impact on you or your personal data. Further processing of personal data shall be in accordance with the purpose of collection. You have the right to withdraw your consent to processing of data. However, this will not affect the lawfulness of data previously processed based on consent.

V. Disclosures of your personal data

We will only use your personal data for our internal business purposes, some of which are mentioned above. We do not sell any of your personal data to third parties. However, we may disclose your information to the following entities:

• Service Providers: We use third party service providers help us to administer certain activities and services on our behalf. We may share personal data about you with such third-party service providers solely for the purpose of enabling them to perform services on our behalf and only in accordance with our instructions. We require all Service Providers to respect the security of your personal data and to treat it in accordance with the law. We do not permit third parties to use your personal information for their own purposes.
• Other Third Parties:  We will disclose your personal data to comply with applicable law or respond to valid legal process, to protect our customers (e.g. to prevent spam or attempts to defraud users of our services), to operate and maintain the security of our services (e.g. to prevent or stop an attack on our systems or networks); or to protect the rights or property of the Company, including enforcing any terms or agreements governing the use of our services. Some of our external third parties are based outside Kenya and in the event that any transfer is necessary, we will obtain your consent or ensure that there are adequate data protection safeguards.

VI.  How we keep your personal data secure

We have put in place appropriate technical and organisational measures to safeguard the personal data we collect from loss, misuse, unauthorized access or disclosure, alteration or destruction.

Please note that although we take appropriate steps to protect your personal information, no website is completely secure and therefore we cannot guarantee the security of your personal information. In the event of a data breach we will notify you and any applicable regulator where we are legally required to do so.

VII. Changes to the privacy policy

We reserve the right to amend this policy from time to time. Any changes will become effective upon posting the revised policy. We will notify you if these changes are material by way of posting a notice on our website or through any relevant services