Privacy Policy

This Privacy Policy explains how TaaTatu Hub Limited ("TaaTatu Hub", "we", "us" or "our") collects, uses, shares and protects personal information when you visit https://www.taatatu.com, submit a request for a quotation, or otherwise communicate with us. We are a company incorporated in Kenya, operating a business-to-business trade and sourcing business from Off Mt. Kenya Road, Mombasa, Kenya, and we serve buyers and suppliers across Africa, Europe, the Middle East, Asia and the Americas.

As a Kenyan company, we are committed to handling personal information responsibly and in line with the Kenya Data Protection Act, 2019 and its Regulations, as overseen by the Office of the Data Protection Commissioner (ODPC). Where you are located in the European Economic Area or the United Kingdom, we also seek to meet the standards of the EU and UK General Data Protection Regulation (GDPR).

1. Information we collect

We collect the following categories of information:

• Information you give us. When you complete the Get a Quote form or contact us by email, we collect your name, company name, business email address, telephone number, country, the products or services you are interested in, estimated volumes, preferred Incoterms, destination and any details you choose to include in your message.
• Business and transaction information. If we enter into a trading relationship, we may collect information needed to fulfil orders and meet regulatory obligations, such as company registration details, shipping and customs documentation, and correspondence.
• Information collected automatically. When you visit the website we may collect limited technical data such as your IP address, browser type, device information, pages viewed and referring pages. This is used to keep the site secure and to understand how it is used.

2. How we use your information

• To respond to your enquiries and prepare quotations, pricing, lead times and shipment options.
• To provide our sourcing, export and trade facilitation services and to administer contracts.
• To communicate with you about your requests and our services.
• To comply with legal, regulatory, tax, customs and export-compliance obligations.
• To operate, secure, maintain and improve our website.

3. Legal bases for processing

Under the Kenya Data Protection Act, 2019, we process personal information on the following lawful bases: the performance of a contract with you, or steps taken at your request before entering a contract; our legitimate interests in operating and growing a business-to-business trade company; compliance with a legal obligation; and, where required, your consent. Where the GDPR applies to you, we rely on the equivalent lawful bases under that regulation. Where we rely on consent, you may withdraw it at any time.

4. How we share information

We do not sell your personal information. We may share it with:

• Service providers who help us run our business and website, such as hosting, email delivery and video streaming providers, who process data on our behalf under appropriate agreements.
• Trade and logistics partners such as freight forwarders, inspection bodies and customs agents, where this is necessary to fulfil a transaction you have requested.
• Authorities and advisers where required by law, regulation, or to establish, exercise or defend legal claims.

5. International transfers

Because we trade internationally, your information may be transferred to and processed in countries other than your own, including outside the European Economic Area. Where we make such transfers, we take steps to ensure an appropriate level of protection, such as relying on adequacy decisions or standard contractual clauses.

6. Data retention

We keep personal information only for as long as necessary for the purposes set out in this policy, including to meet legal, accounting, tax and export-record requirements. When information is no longer needed, we delete or anonymise it.

7. Your rights

Under the Kenya Data Protection Act, 2019 you have the right to be informed of how your data is used, to access your personal information, to object to its processing, and to have inaccurate or misleading data corrected or deleted. Where the GDPR applies, you may also have rights to restrict processing and to data portability. To exercise any of these rights, contact us at exports@taatatu.com.

If you are not satisfied with how we handle your information, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya, or, where the GDPR applies, with the data protection authority in your country.

8. Cookies

We use only the cookies and similar technologies necessary for the website to function and to keep it secure. We do not use the website to build advertising profiles. You can control cookies through your browser settings.

9. Data security

We use reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last revised. Material changes will be posted on this page.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your information, contact us at exports@taatatu.com or write to us at TaaTatu Hub Limited, Off Mt. Kenya Road, Mombasa, Kenya.