Last updated: 24 September 2026.

This policy explains what personal data Kilimo Hakika Limited collects through kilimohakika.com, why we collect it, who we share it with, and what you can do about it. It is written to meet our obligations under the Kenya Data Protection Act, 2019.

Kilimo Hakika Limited is the data controller for the information described here. You can reach us at info@kilimohakika.com.

We only collect what you type into a form. We do not buy personal data, and we do not build profiles of visitors who simply read the site.

Depending on which form you use, we collect:

• Contact form: your name, email address, subject, and message.
• Consultancy request: your full name, email address, phone number, and the project details you describe.
• Partnership enquiry: your full name, email address, organization, phone number, and the type of partnership you select.
• Careers notifications: your full name and email address.
• Job applications: your full name, email address, phone number, cover letter, and the CV file you upload.
• Newsletter signup: your email address, and your name if you give one.
• Quote requests: your name, email address, phone number, the product and quantity you are asking about, and optionally your company, delivery location, and notes.

If you pay a quote by M-Pesa, we also record the phone number used for the payment, the amount, and the transaction reference Safaricom returns. We never see or store your M-Pesa PIN.

Our web server keeps standard technical logs, including IP addresses, for security and troubleshooting.

We use your information to:

• Reply to your enquiry and carry out the work you asked about.
• Prepare and send quotes, and process payments for them.
• Assess job applications.
• Send newsletters, where you asked to receive them.
• Keep the site secure and diagnose faults.
• Meet our legal and accounting obligations.

We do not use your information for automated decision-making, and we do not send marketing to people who did not ask for it.

Under the Data Protection Act, 2019, we rely on the following grounds:

• Consent, which you give by ticking the consent box on a form or subscribing to the newsletter. You can withdraw it at any time.
• Performance of a contract, where you have asked for a quote or are paying for goods.
• Legitimate interest, for keeping the site secure and for ordinary business correspondence.
• Legal obligation, where tax or employment law requires us to keep records.

We do not sell your personal data, and we do not share it for advertising.

We share the minimum necessary with:

• Safaricom, when you pay by M-Pesa, which receives the paying phone number and the amount in order to process the transaction.
• Our email delivery provider, which handles the notification and reply emails this site sends.
• Our hosting and storage providers, on whose servers the site and its database run.
• Government authorities, where we are legally required to disclose information.

There are no analytics services, advertising networks, or social media tracking pixels on this site.

Form submissions and quote records are kept for as long as we have an active or prospective business relationship with you, and afterwards only where tax and accounting law requires it.

Job applications and uploaded CVs are kept for the duration of the recruitment process, and for a reasonable period afterwards in case a similar role opens, unless you ask us to delete them sooner.

Newsletter subscriptions are kept until you unsubscribe.

The site is served over encrypted HTTPS connections. Access to the admin system is restricted to named staff accounts protected by individually hashed passwords, and every change to a quote or payment is recorded in an audit log.

Uploaded CVs are stored in a private location that is not reachable from the public internet, and can only be downloaded by an authorised administrator.

No system is completely secure. If a breach affects your personal data, we will notify you and the Office of the Data Protection Commissioner as the Act requires.

Under the Data Protection Act, 2019, you have the right to:

• Be told what personal data we hold about you, and get a copy of it.
• Have inaccurate data corrected.
• Ask us to delete your data, where we have no continuing legal reason to keep it.
• Object to processing, or ask us to restrict it.
• Withdraw consent at any time, including by using the unsubscribe link in any newsletter.

To exercise any of these, email info@kilimohakika.com. We will respond within the timeframe set by the Act.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

This site does not use tracking or advertising cookies, and there is no cookie banner because there is nothing to consent to.

The only cookies we set are session cookies for staff signing in to the admin area. If you are reading the public site, none are set.

This site is intended for businesses, farmers, and partners, and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted information to us, contact us and we will delete it.

We will update this page when our practices change, and the date at the top will change with it.

Questions about this policy, or about the data we hold on you, should go to info@kilimohakika.com.