Last updated: 10 September 2026
This Privacy Policy explains how Kirima Fresh Dairies Ltd ("we", "us", "our") collects, uses, discloses and protects your personal data when you visit our website or use our services. We are committed to complying with the Kenya Data Protection Act, No. 24 of 2019 (the "DPA") and the Data Protection (General) Regulations, 2021.
1. Who we are
Kirima Fresh Dairies Ltd is a dairy processing company based in Naivasha, Nakuru County, Kenya. For the purposes of the DPA, we act as the data controller of the personal data described in this policy. Where we engage service providers to process data on our behalf, they act as data processors under our instructions.
2. Personal data we collect
We may collect the following categories of personal data:
- Contact data — name, email address, phone number and any message you submit through our contact form or by email.
- Business data — company name and role where you provide them when enquiring about supply, partnership or bulk orders.
- Technical data — IP address, browser type and basic usage information collected automatically when you visit the site.
- Communications data — records of correspondence you send us.
We do not collect special (sensitive) personal data through this website. Please do not include health, financial or other sensitive information in your messages.
3. How we use your personal data
We process your personal data only where we have a lawful basis under section 30 of the DPA, namely:
- Consent — where you choose to contact us or subscribe to updates (you may withdraw consent at any time).
- Contractual necessity — to respond to enquiries and to set up or manage a business relationship with you.
- Legal obligation — to meet record-keeping and regulatory requirements under Kenyan law.
- Legitimate interests — to maintain the security of our website and improve our services, where this does not override your rights.
We use your data to: respond to enquiries and requests; process orders, supplies and partnerships; communicate with farmers, suppliers and buyers; maintain accurate records; and keep the website secure and functioning.
4. Sharing your personal data
We do not sell your personal data. We may share it only with: our processors (such as hosting and email providers) bound by confidentiality; professional advisers and auditors; and public authorities where required by Kenyan law. Any cross-border transfer of personal data is carried out in accordance with the DPA and its regulations.
5. Data retention
We keep your personal data only for as long as is necessary for the purposes set out above or as required by law. When it is no longer needed, we delete it or anonymise it.
6. Data security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure, consistent with the security requirements of the DPA.
7. Your rights
Under the DPA you have the following rights in relation to your personal data:
- Right to be informed — to be told how and why we use your data.
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure — to ask us to delete your data where the law requires.
- Right to object — to object to processing for direct marketing or on legitimate-grounds grounds.
- Right to restriction — to ask us to limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a structured, machine-readable format.
To exercise any of these rights, contact us using the details in section 8. We will respond within the timelines required by the DPA.
8. Contacting us
If you have any question about this policy or how we handle your data, contact our Data Protection contact:
- Email: info@kirimafresh.co.ke
- Phone: +254 115 417656
- Address: Naivasha, Nakuru County, Kenya
If you remain dissatisfied, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.
9. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date above indicates when it was last revised.
