Home › Privacy notice
Legal
Privacy notice
This notice explains what personal data Konza Tropicals Limited collects through konzatropicals.com and its business communications, why, how long it is kept, and the rights you have. Last reviewed 15 October 2026.
Who we are
Konza Tropicals Limited is a company registered in Kenya with its office at 1st Floor, Luther Plaza, Nyerere Road, Nairobi, Kenya (P.O. Box 50 – 90150, Konza Technopolis). We are the data controller for the processing described here. Contact: consult@konzatropicals.com.
What we collect and why
| Activity | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Enquiry forms (supply offers, oil, samples, consultancy, investment, partnerships, visits) | Name, company, email, country, phone if given, your message, the page you wrote from, a hashed network identifier, browser type, time | To answer your enquiry and prepare an offer or proposal. Legal basis: steps at your request before entering a contract, and our legitimate interest in running the business. Consent is asked on the form for transparency. | Up to 3 years after the last contact, or longer where a contract follows (then as business records, 7 years under Kenyan tax law). |
| Season updates newsletter | Email address, confirmation time, hashed network identifier | To send you a monthly update you asked for. Legal basis: consent, confirmed by clicking the link in the confirmation email (double opt-in). You can withdraw at any time with the unsubscribe link in every email. | Until you unsubscribe; unsubscribe records kept to honour your choice. |
| Email and WhatsApp | Your contact details and the content you send | To correspond with you. WhatsApp messages are processed by Meta Platforms under its own terms. | As business correspondence, up to 7 years. |
| Website analytics (Google Analytics 4) | Pages viewed, approximate country and device, events such as clicks on WhatsApp or PDF downloads; IP addresses are truncated | To understand which pages and markets interest visitors. Legal basis: legitimate interest. We never send names, email addresses or form contents to analytics. | Google Analytics retains event data for 14 months. |
| Server logs and security | IP address, request, time, user agent; rate limiting uses a one-way hash of the IP | Security, abuse prevention and fault finding. Legal basis: legitimate interest. | Hosting provider logs, typically 30 days; rate-limit counters 24 hours. |
Cookies
The site sets a short-lived technical cookie (ktf) when you use a form; it protects the form from forged submissions and holds no personal data. Google Analytics sets its own cookies (_ga, _ga_*) to recognise returning visitors. The Google Maps embed on the contact page may set Google cookies when it loads. You can block cookies in your browser; the site keeps working, except that forms need the technical cookie to send.
Who receives your data
- Our hosting provider (GoDaddy, servers in the United States and Europe) stores form records and sends our email.
- Google LLC for analytics and the map embed.
- Meta Platforms for WhatsApp conversations you start.
- Where you ask for a quality inspection, insurance or sourcing through our partners (Fruit Quality Studio Africa, SAFTA), we share only what is needed to perform that service, and we tell you first.
We do not sell personal data and we do not use it for automated decision making.
International transfers
Data may be processed outside Kenya and outside the EU/UK, in particular in the United States by our hosting and analytics providers. We rely on the providers' standard contractual clauses and, for Kenya, on the conditions of section 48 of the Data Protection Act, 2019.
Your rights
Under the Kenya Data Protection Act, 2019, and where it applies the EU/UK GDPR, you may ask for access to your data, correction, deletion, restriction, objection to processing based on legitimate interest, portability, and to withdraw consent. Write to consult@konzatropicals.com; we reply within 30 days. You may complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke) or to your local supervisory authority.
Children
Our services are for businesses. We do not knowingly collect data from children.
Changes
We will post changes on this page with a new review date. Substantive changes to how we use data will be notified to newsletter subscribers.
Contact
Let us talk fruit
We work from Nairobi with our own orchards in the Rift Valley and partner orchards and exporters in Tanzania, Uganda, Rwanda and Burundi, and we answer email and WhatsApp during East African, European and Gulf business hours.