Legal
Data Protection Notice
Last updated
8 July 2026
This notice summarises how EAPC PLC handles personal data in line with the Kenya Data Protection Act, 2019.
What personal data we collect
We may collect basic identity and contact details (name, email, phone), correspondence content, employment information (for job applicants), business information (for distributors and suppliers) and limited technical data about your visit to our website.
Why we collect it
We collect personal data to respond to your enquiries, process applications and requests, manage business relationships, comply with our legal obligations and improve our services.
Business purpose only
Your personal data is used strictly for legitimate business purposes. We do not sell personal data and we do not use it for unrelated marketing without your explicit consent.
Forms where data is collected
- Contact and enquiry forms
- Newsletter subscription
- Careers / job applications
- Tender and procurement inquiries
- Distributor application forms
- Quote / bulk order requests
Retention
We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation.
Security
We apply appropriate technical and organisational measures - including access controls, encryption in transit, monitoring and staff training - to safeguard your personal data.
Data subject rights
You have the right of access, correction, deletion, restriction, objection and portability, and the right to withdraw consent at any time, subject to the Kenya Data Protection Act, 2019.
Privacy contact details
Data Protection Officer, EAPC PLC, P.O. Box 20 – 00204, Athi River, Kenya · info@eapcc.co.ke.
