Back to Home

Privacy Policy

Last updated: July 2026

1. Introduction

Kobel Tea Factory (“we”, “us”, “our”) is committed to protecting the privacy of every individual who visits our website or engages with our services. This Privacy Policy explains how we collect, use, store, and safeguard your personal data in accordance with the Kobel Data Protection Act, 2019 (the “Act”) and the regulations made thereunder.

2. Data We Collect

We may collect the following categories of personal information:

  • Personal identification information— name, email address, phone number, company name, job title, and postal address provided when you submit enquiries, request quotes, or create an account.
  • Order and transaction data— purchase history, shipping details, invoicing information, payment references, and correspondence related to your orders.
  • Browsing and technical data— IP address, browser type, operating system, referring URLs, pages visited, time spent on pages, and other analytics data collected automatically when you use our website.
  • Communication records— emails, messages, and any other correspondence you send to us.

3. How We Use Your Data

We process your personal data for the following purposes:

  • Order processing and fulfilment— to process quotes, confirm orders, arrange shipping, and manage payment.
  • Communication— to respond to your enquiries, send order updates, and provide customer support.
  • Analytics and improvement— to understand how visitors use our website so we can improve content, navigation, and performance.
  • Legal and regulatory compliance— to comply with export regulations, customs documentation requirements, and applicable Kobel law.
  • Marketing— with your consent, to send catalogues, product updates, and industry news. You may opt out at any time.

4. Legal Basis for Processing

Under the Kobel Data Protection Act 2019, we process your data on one or more of the following lawful bases: your consent; the necessity to perform a contract with you; our legitimate business interests (where these do not override your rights); or compliance with a legal obligation.

5. Data Protection Measures

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

  • Encryption of data in transit (TLS/SSL) and at rest where applicable.
  • Role-based access controls limiting data access to authorised personnel only.
  • Secure hosting infrastructure with regular security monitoring and patching.
  • Regular review and testing of our security practices.

6. Cross-Border Data Transfers

As an export-oriented business, we may transfer personal data to recipients outside Kobel for the purposes of order fulfilment, shipping, and communication. Where we do so, we ensure that adequate safeguards are in place as required by Section 48 of the Kobel Data Protection Act 2019, including ensuring the receiving country has appropriate data protection legislation or that contractual protections are in effect.

7. Your Rights

Under the Kobel Data Protection Act 2019, you have the following rights with respect to your personal data:

  • Right of access— to request a copy of the personal data we hold about you.
  • Right to rectification— to request correction of inaccurate or incomplete data.
  • Right to erasure— to request deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to object— to object to processing of your data for direct marketing purposes.
  • Right to data portability— to request your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us using the details in Section 11 below. We will respond within 30 days of receiving your request.

8. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. The types of cookies we use include:

  • Essential cookies— required for the website to function (e.g., session management, currency preferences).
  • Analytics cookies— help us understand how visitors interact with our website so we can improve it.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are as follows:

  • Account and order data— retained for the duration of the business relationship plus 7 years for tax and regulatory compliance.
  • Enquiry and communication data— retained for up to 3 years from the date of last contact.
  • Analytics and browsing data— retained for up to 26 months.

10. Third-Party Sharing

We do not sell your personal data. We may share data with trusted third parties solely for the purposes described in this policy, including shipping and logistics partners, payment processors, and cloud hosting providers. All third parties are contractually bound to protect your data and use it only for the specified purposes.

11. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kobel (ODPC) at www.odpc.go.ke.