Privacy Policy

Africorex Ltd is a Kenyan technology, construction, and general supplies company registered in Kenya. Our contact details are: Company: Africorex Ltd Address: P.O. Box 3510-00100, Nairobi, Kenya Email: info@africorex.com Phone: +254 742 120 184 Website: www.africorex.com Africorex is the data controller in respect of personal data you provide to us.

We may collect the following categories of personal data: Identity data: Full name, company name, and KRA PIN (where applicable for billing). Contact data: Email address, telephone number, and postal address. Transaction data: Details of services you have purchased or requested, including quotes, invoices, and project records. Technical data: IP address, browser type, and pages visited when you use our website. Communications data: Messages, enquiries, email delivery records, portal messages, and correspondence you send to us. Operational and payment data: M-Pesa confirmations, bank payment references, document uploads, audit logs, and security events. AI-assisted processing data: Tender, quote, document, receipt, and collections content submitted for assisted processing where enabled by authorised staff. We collect this data when you contact us, request a quote, enter into a contract, register for our client portal, or correspond with us by any means.

We use your personal data for the following purposes: To provide and manage the services you have requested. To issue quotations, invoices, and delivery documentation. To communicate with you about your projects or enquiries. To comply with legal obligations, including tax and procurement requirements. To improve our services and website based on aggregated usage patterns. To detect and prevent fraud, errors, or misuse of our services. We do not sell, rent, or share your personal data with third parties for marketing purposes.

We process your personal data on the following lawful bases as set out in Section 30 of the Data Protection Act, 2019: Performance of a contract: Processing is necessary to perform a contract to which you are a party, or to take steps at your request before entering a contract. Legal obligation: Processing is necessary for compliance with a legal obligation under Kenyan law (including tax laws and procurement regulations). Legitimate interests: Processing is necessary for purposes of our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms. Consent: Where we rely on your consent, you may withdraw that consent at any time by contacting us at info@africorex.com.

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. For clients and suppliers, we typically retain transaction records for seven (7) years in accordance with Kenyan tax and accounting requirements. Portal account data is retained for the duration of the active client relationship and for a period of three (3) years thereafter, unless you request earlier deletion. Security events, email logs, and audit logs are retained for operational accountability, fraud prevention, and legal defence, then deleted or anonymised according to the applicable retention schedule. You may request deletion of your personal data at any time, subject to our legal retention obligations.

Under the Kenya Data Protection Act, 2019, you have the following rights in respect of your personal data: Right of access: You may request a copy of the personal data we hold about you. Right to rectification: You may request correction of inaccurate or incomplete personal data. Right to erasure: You may request deletion of your personal data, subject to our legal obligations. Right to object: You may object to processing of your personal data in certain circumstances. Right to data portability: You may request transfer of your data in a structured, commonly used format. Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. To exercise any of these rights, contact us at info@africorex.com. We will respond within 21 days. If you are dissatisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Access to personal data is restricted to employees and contractors who need it to perform their duties, and all personnel are bound by confidentiality obligations. Notwithstanding these measures, no transmission over the internet is completely secure. You provide personal data at your own risk, and we cannot guarantee absolute security.

We may share your personal data with trusted service providers who assist us in operating our business, including cloud hosting and database providers, Resend for official email, M-Pesa and banking providers for payment processing, SMS or WhatsApp messaging providers where configured, and AI service providers where authorised staff use assisted document, tender, receipt, quote, or collections workflows. These providers are required to process your data only on our instructions and in accordance with applicable data protection laws. Some providers may process data outside Kenya. Where this occurs, we rely on contractual safeguards, access controls, data minimisation, and other protections required by the Kenya Data Protection Act and regulations. We do not sell or rent personal data for marketing purposes.

Our website may use essential cookies to support its operation. We do not use third-party advertising cookies or tracking cookies that follow you across websites. Where we use any analytics tools, we configure them to anonymise IP addresses and do not link analytics data to individual identities. You may configure your browser to refuse cookies; however, this may affect the functionality of certain parts of our website.

We may update this Privacy Policy from time to time to reflect changes in law, our business practices, or the services we offer. We will publish the revised policy on our website with an updated effective date. Continued use of our services after a change constitutes acceptance of the updated policy.

For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact us at: Africorex Ltd Attn: Data Protection P.O. Box 3510-00100 Nairobi, Kenya Email: info@africorex.com Phone: +254 742 120 184