1. Who we are
KAIS Automotive ("KAIS", "we", "us") is the data controller for personal data collected through this website, WhatsApp, phone and in-person services. We comply with the Kenya Data Protection Act, 2019 (KDPA), its 2021 Regulations, and — where applicable — the EU/UK General Data Protection Regulation (GDPR).
2. Data we collect
- Identity & contact: name, phone number, email, delivery address.
- Vehicle data: make, model, year, VIN/chassis number, registration, service history.
- Transaction data: quotes, orders, payments (processed by our payment partners — we do not store full card details).
- Account data: login credentials, preferences, saved parts and garage.
- Technical data: IP address, device and browser type, pages visited, cookies.
3. Why we use it and our lawful basis
- To respond to quotes and fulfil orders — performance of a contract.
- To run your account and track deliveries — performance of a contract.
- To meet tax, accounting and legal duties — legal obligation.
- To prevent fraud and secure our services — legitimate interest.
- To send offers and newsletters — your consent, which you can withdraw at any time.
4. Sharing
We share data only with parties who help us serve you: partner workshops, couriers, payment processors, cloud hosting and messaging providers (including WhatsApp/Meta), and authorities where the law requires. We never sell your personal data.
5. International transfers
Some providers store data outside Kenya. Where this happens we rely on safeguards required by Section 48–50 of the KDPA and GDPR, such as adequacy decisions or standard contractual clauses.
6. How long we keep it
We keep data only as long as needed: quote enquiries up to 12 months, order and invoice records for 7 years (tax law), and account data until you close your account.
7. Your rights
Under the KDPA and GDPR you may: be informed; access your data; correct or delete it; object to or restrict processing; data portability; withdraw consent; and not be subject to decisions made solely by automated means. You may also complain to the Office of the Data Protection Commissioner (ODPC), Kenya — odpc.go.ke.
8. Security
We use encryption in transit, access controls and staff confidentiality obligations. We will notify you and the ODPC within 72 hours of becoming aware of a breach that poses a risk to you.
9. Children
Our services are not directed at children under 18, and we do not knowingly collect their data.
10. Contact us
To exercise your rights or ask a question, call or WhatsApp 0703 442 282 or email sales@kaisautomotive.uk. We respond within the timelines set by law.