Data Protection Privacy Statement

 

Welcome to Sotik Tea Company Limited's (hereinafter “Sotik Tea Company”, “we”, “our” or “us”) website (the “Service”). We, as the data controller, are responsible for the personal data we collect and are committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, disclose, safeguard or otherwise process your personal information through your use of the Service. This Privacy Policy also explains the privacy rights you have in relation to these processing activities.

 

This Privacy Policy was last updated in October 2024. However, the Privacy Policy can change over time, for example, to comply with legal requirements or to meet changing business needs. It is important that the personal data we hold about you is accurate and current. Please inform us if any of your personal data changes during your relationship with us, for example, any change in your name, email address, phone number, etc.

 

As used in this Privacy Policy, ‘personal information’ or ‘personal data’ means information that relates to an identified individual or to an identifiable individual.

 

Data Processing Principles

 

Sotik Tea Company adheres to the principles of personal data processing as per Kenya's Data Protection Act 2019, by ensuring fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity and confidentiality of your personal data collected through your use of the Service.

 

Information Collection

 

For a better experience while using our Service, we may collect, use, store or require you to provide us with certain personally identifiable information, including but not limited to:

 

• Personal Identification Information: Name, email address, phone number.
• Technical Data: IP address, browser type, and version, operating system.
• Usage Data: Information about how you use our website and services collected mainly through cookies and other tracking technologies.

 

Lawful Basis for Processing

 

We process your personal data based on one or more of the following legal bases:

 

• performance of a contract with you: where we need to perform the contract we are about to enter into or have entered into with you.
• legitimate interests: we may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example, to enable us to give you the best and most secure customer experience when using the Service. We ensure that we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests.
• consent: we rely on consent for direct marketing communications and other optional services such as cookies that are not necessary for the functioning of the Service.

 

Purpose of Data Collection

 

We have set out below a description of the use the various categories of your personal data that we collect and the legal bases we rely on to do so:

 

1. Order Processing: Managing your orders and providing customer service.
   Type of data: Name, email address, phone number
   Legal basis: Performance of a contract with you
    
2. Marketing: Sending promotional emails about new products, special offers, or other information we think you may find interesting
   Type of data: Email address
   Legal basis: Consent
    
3. Website Improvement: Using feedback to improve our products and services.
   Type of data: Technical and usage data
   Legal basis: Necessary for our legitimate interests

 

Data Sharing and Disclosure

 

We may disclose or share personal information with the certain third parties for our legitimate business purposes including:

 

• Third-party service providers (for example, website management, information technology and related infrastructure provision, customer service, e-mail delivery, auditing, and other similar service providers) in order for those service providers to perform business functions on behalf of Sotik Tea Company; or
• As required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to government requests, including public and government authorities outside your country of residence, for national security and/or law.

 

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

 

Data Subject Rights

 

You have the right to access, rectify, erase, restrict processing, object to processing, and data portability. Please contact us to exercise these rights on info@sotiktea.co.ke

 

Data Security Measures

 

Sotik Tea Company implements technical, physical and organizational security measures to protect your personal data, including encryption, firewalls, and secure server facilities.

 

Data Retention

 

We retain your personal data as long as necessary for the purposes outlined in this policy or as required by the Data Protection Act or other relevant laws. We review the personal data which we hold periodically and assess whether we need to keep holding it. Where we no longer need it, we permanently delete it.

 

International Data Transfers

 

Any transfer of data outside Kenya will be conducted in compliance with applicable laws and ensuring adequate data protection safeguards.

 

Children’s Privacy

 

Our website is not intended for children under the age of 18years. We do not knowingly collect data from children.

 

Policy Updates

 

We will be updating this Policy periodically. All changes we make are, unless stated otherwise, effective immediately upon notice, which we may give by any means, including but not limited to, by posting the updated version of the Policy on our website or within our application. If the changes are material, we may also post a notice on our website drawing your attention to it.

 

Contact Information

 

For any questions, complaints or concerns regarding this policy or your data, contact us at info@sotiktea.co.ke

 

Third-party links

 

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. When you leave our website, we encourage you to read the privacy policy of every website you visit.