PRIVACY POLICY

I. Introduction

Welcome to the Kakuzi PLC Privacy Policy.

We are committed to protecting the privacy of those with whom we interact, and we recognise the need to respect and protect information that is collected or disclosed to us. This policy is intended to tell you how we use your personal data when you visit our website, inform you about your privacy rights and how the law protects you.

This policy applies to the information collected through the use of our website (www.kakuzi.co.ke). It does not apply to information collected in any other manner. Your use of this website constitutes acceptance of this policy and any modifications made to it.

II. The information we collect

Personal data means any information that relates to you and/or information from which you can be identified, directly or indirectly. We may collect, use, store, process and transfer the following personal data:

  • Contact information includes address, email address and telephone number including your communication preferences.
  • Financial information includes bank account and payment card details.
  • Identity information includes first name, maiden name, last name, title and username or similar identifier.
  • Technical data includes internet protocol (IP) address, browser type and other technical information for internal use by our technical support staff.
  • Transaction information includes details about payments to and from you and other details of products and services you have purchased from us.
  • Usage data includes information about how you use our website, including our products and services where applicable.

Any personal data or information that we collect, which can directly or indirectly identify you, will be used in accordance with this policy.

III. How we collect your personal data

We collect data from and about you through our website by various means. In certain areas of our website, we ask you to provide identity and contact information to enable us to verify whether you are entitled to access and use the services available, to support your customer relationship with us, or to assist you with technical support. We may also ask you to provide financial information for instance, when you place an order for our products through the website.

Providing the information we request is optional. However, failure to provide this information may prohibit you from accessing and using certain services available on the website.

As you interact with our website, we may also automatically collect usage and technical data about the manner in which you interact with our website and the equipment in use. We collect this data by using cookies and other similar technologies (See IV on more about cookies).

IV. How we use your personal data

We will only use your personal data as permitted by data protection and privacy laws and only for the purpose which we collected it. We may also use your data for other reasons compatible with the original purpose. If we need to use your data for an unrelated purpose, we will notify you of our legal basis for doing so.

We will process your personal data: to provide our products, engage in our business relationship such as for the performance of a contract with you, to provide customer support services, to communicate with you for any permitted purpose, to analyse our markets and customers, for business monitoring and record keeping, for the prevention or detection of fraud or crime, and to comply with our legal obligations.

Where required or permitted by law, we may process your personal data without your knowledge or consent in compliance with this policy and as permitted by data protection laws. This may include where it is necessary for:

  • Our legitimate interests (in the interests of our business). Before we process your personal data in this manner, we will assess the impact on your personal data. Where the balance is in your favour, we will only proceed where we have obtained your consent or where we are permitted or required to do so by law.
  • Lawful legal proceedings or investigations. In each instance, we will endeavour to safeguard your privacy as much as is permitted by data protection laws.

Cookies: Cookies are bits of data stored on the device when you access our website. Cookies collect and store information about a user’s preferences, product usage, viewed content, and registration information. We may use cookies to store your preferences and settings, help you with signing in and understand how you are using our website and services so that we can improve your experience.

V. Disclosures of your personal data

We will only use your personal data for our internal business purposes, some of which are mentioned above. We do not sell any of your personal data to third parties. However, we may disclose your information to the following entities:

  • Kakuzi Affiliates: we may need to transfer your personal data to other Group companies (affiliates of Camelia PLC – the majority shareholder of Kakuzi PLC) to provide the products and services you require.
  • Service Providers: We use third party service providers help us to administer certain activities and services on our behalf. We may share personal data about you with such third-party service providers solely for the purpose of enabling them to perform services on our behalf and only in accordance with our instructions. We require all Service Providers to respect the security of your personal data and to treat it in accordance with the law. We do not permit third parties to use your personal information for their own purposes.
  • Third Parties:  We will disclose your personal data to comply with applicable law or respond to valid legal process, to protect our customers (e.g. to prevent spam or attempts to defraud users of our services), to operate and maintain the security of our services (e.g. to prevent or stop an attack on our systems or networks); or to protect the rights or property of the Company, including enforcing any terms or agreements governing the use of our services. Some of our external third parties are based outside Kenya and in the event that any transfer is necessary, we will obtain your consent or ensure that there are adequate data protection safeguards.

VI.  How we keep your personal data secure

We have put in place appropriate technical and organisational measures to safeguard the personal data we collect from loss, misuse, unauthorized access or disclosure, alteration or destruction.

Please note that although we take appropriate steps to protect your personal information, no website is completely secure and therefore we cannot guarantee the security of your personal information. In the event of a data breach we will notify you and any applicable regulator where we are legally required to do so.

VII. How long we keep your personal data

We will retain personal data for as long as necessary to fulfil the purposes for which it has been collected as outlined in this policy. We may also retain your personal data where it is required or authorised by law, where it is reasonably necessary for a lawful purpose or where we have obtained your consent.

We shall delete, erase, anonymise or pseudonymise any personal data that we do not need to retain for any purpose as specified above.

VIII. Accessing your personal data and other rights

You have certain rights under data protection laws in relation to your personal data. Please contact if you wish to exercise any of the rights below. You have the right to:

  • Be informed of the use to which your personal data is to be put;
  • Access your personal data which is in our custody;
  • Receive any personal data concerning you in a structured, commonly used and easily accessible format;
  • Request for any personal data in our possession to be rectified or updated;
  • Request to have any personal data we have about you to be erased to the extent permitted by applicable law;
  • Request us to transmit your personal data directly to another organization where such data was obtained and used with your consent and knowledge;
  • Request us to suspend the processing of your personal data for instance where a rectification or update is required;
  • Object to processing of all or part of your personal data.

Enforcing your rights: If you wish to enforce any of your rights above or under applicable data protection laws, then please contact us at mail@kakuzi.co.ke. We will respond to your request as soon as reasonably possible.

Note that we may need to request specific information from you to ascertain your identity, to establish your right to exercise the right requested or in the event that further information is required to process your request. We may also refuse to comply with your request where we determine that it is unfounded or has no legal basis.

Complaints: It is important that you ensure you have read this privacy policy. If you do not think that we have processed your data in accordance with this policy, you should let us know as soon as possible.

IX. Changes to the privacy policy

We reserve the right to amend this policy from time to time and it is important that you check for changes often. The “Date last updated” at the bottom of the policy will state when the policy was last updated. Any changes will become effective upon posting the revised policy. We will notify you if these changes are material by way of posting a notice on our website or through any relevant services.

Issue Number: Issue I

Date last updated: August 2020

Author: Legal Manager