Last updated: 10 September 2026
This Data Protection Policy sets out how Kirima Fresh Dairies Ltd complies with the Kenya Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021 when handling personal data. It supplements our Privacy Policy.
1. Our commitments
We are committed to the data protection principles in the DPA, namely that personal data is:
- processed lawfully, fairly and transparently;
- collected for specified, explicit and legitimate purposes;
- adequate, relevant and limited to what is necessary;
- accurate and kept up to date;
- kept only for as long as necessary; and
- processed securely and confidentially.
2. Roles and responsibilities
We act as data controller for the personal data we collect through this website. Where we engage third parties to process data on our behalf, we put in place written agreements requiring them to act only on our instructions and to meet the security and confidentiality requirements of the DPA.
3. Cookies and similar technologies
Our website uses minimal cookies for essential functionality and basic analytics. We do not use cookies for third-party advertising. You can control or delete cookies through your browser settings; disabling them may affect some site features.
4. Data collection and minimisation
We collect only the personal data we need for the purposes described in our Privacy Policy, and we avoid collecting more than is necessary.
5. Storage and security
Personal data is stored on secured systems with access restricted to authorised personnel. We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, theft or disclosure.
6. Data subject rights
We respect the rights of data subjects under the DPA, including access, rectification, erasure, objection, restriction and portability. Requests can be made via the contact details in our Privacy Policy and will be handled within the timelines required by law.
7. Breach management
In the event of a personal data breach, we will assess and, where required, notify the Office of the Data Protection Commissioner and affected data subjects in line with the DPA.
8. Contact
For data protection enquiries, contact us at info@kirimafresh.co.ke or +254 115 417656. You may also raise a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.
