Mahare Coffee Roasters and Traders Ltd
Effective Date: 16.06.2026
Last Updated: 16.06.2026
1. Introduction
Mahare Coffee Roasters and Traders Ltd (“Mahare Coffee”, “we”, “our”, or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, purchase our products, request quotations, communicate with us, participate in our private label programs, or otherwise interact with our business.
This Privacy Policy is designed to comply with:
- The Kenya Data Protection Act, 2019;
- The Data Protection (General) Regulations, 2021;
- The General Data Protection Regulation (EU) 2016/679 (“GDPR”);
- Other applicable privacy and data protection laws.
By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
Mahare Coffee Roasters and Traders Ltd is a Kenyan coffee company engaged in coffee sourcing, roasting, processing, export, private labeling, wholesale distribution, retail sales, and related coffee services.
Data Controller
Mahare Coffee Roasters and Traders Ltd
Email: privacy@maharecoffeetraders.com
Phone: +254 722 825 455
Registered Office: Thika Road Shell Exit 13
3. Personal Information We Collect
We may collect the following categories of personal information:
Information You Provide Directly
- Full name
- Company name
- Email address
- Telephone number
- Billing address
- Shipping address
- Country and location
- Job title
- Tax information where applicable
- Payment and transaction details
- Messages and inquiries submitted through our website
- Product preferences
- Private label and wholesale application information
Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Operating system
- Website usage information
- Pages viewed
- Referral sources
- Date and time of access
- Cookies and tracking technologies
Information from Third Parties
We may receive information from:
- Payment processors
- Shipping and logistics providers
- Marketing partners
- Social media platforms
- Analytics providers
- Business referral partners
4. Why We Collect Your Data
We collect and process personal data for the following purposes:
- To provide products and services
- To process orders and payments
- To deliver products and manage shipments
- To respond to inquiries and customer support requests
- To administer wholesale and private label programs
- To improve our website and services
- To manage customer relationships
- To send transactional communications
- To send marketing communications where consent has been provided
- To prevent fraud and unauthorized activities
- To comply with legal and regulatory obligations
- To maintain business records
5. Legal Basis for Processing
Where GDPR applies, we rely on one or more of the following lawful bases:
Contractual Necessity
Processing required to fulfill orders, quotations, contracts, and business relationships.
Consent
Where you have provided consent to receive newsletters, promotional content, or marketing communications.
Legal Obligation
Processing necessary to comply with tax, customs, export, anti-money laundering, and other legal obligations.
Legitimate Interests
Processing necessary to:
- Improve services
- Prevent fraud
- Secure our systems
- Manage business operations
- Maintain customer relationships
We ensure that our legitimate interests do not override your fundamental rights and freedoms.
6. Marketing Communications
We may send newsletters, product updates, promotions, and industry information.
You may withdraw your consent and unsubscribe at any time by:
- Clicking the unsubscribe link in emails;
- Contacting us directly;
- Updating your communication preferences.
We will not send direct marketing communications where prohibited by applicable law.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies to:
- Improve website functionality;
- Analyze website traffic;
- Remember user preferences;
- Enhance user experience;
- Measure marketing effectiveness.
Cookies may include:
- Essential cookies
- Functional cookies
- Analytics cookies
- Marketing cookies
You may manage cookie preferences through your browser settings.
Disabling cookies may affect certain website functions.
8. Sharing Your Information
We do not sell your personal data.
We may share personal information with:
- Payment service providers
- Shipping and logistics companies
- Website hosting providers
- Cloud service providers
- Professional advisors
- Auditors
- Government authorities where required by law
- Business partners involved in fulfilling your orders
All third parties are required to maintain appropriate confidentiality and security measures.
9. International Data Transfers
As an international coffee trading business, your information may be transferred outside Kenya or the European Economic Area (EEA).
Where such transfers occur, we implement appropriate safeguards including:
- Standard Contractual Clauses (SCCs);
- Adequacy decisions where applicable;
- Contractual safeguards;
- Other lawful transfer mechanisms required under applicable laws.
10. Data Retention
We retain personal data only for as long as necessary to:
- Fulfill contractual obligations;
- Provide customer support;
- Comply with legal requirements;
- Resolve disputes;
- Enforce agreements.
Retention periods may vary depending on the type of information and applicable legal requirements.
When data is no longer required, it is securely deleted, anonymized, or destroyed.
11. Data Security
We implement reasonable technical and organizational measures to protect personal information against:
- Unauthorized access;
- Loss;
- Misuse;
- Disclosure;
- Alteration;
- Destruction.
These measures may include:
- Access controls;
- Encryption;
- Secure hosting environments;
- Staff confidentiality obligations;
- Security monitoring.
While we strive to protect your information, no method of transmission or storage is completely secure.
12. Your Rights Under Kenyan Data Protection Law
Subject to applicable law, you have the right to:
- Be informed about the use of your personal data;
- Access your personal data;
- Object to processing of your personal data;
- Request correction of inaccurate information;
- Request deletion of personal data where appropriate;
- Restrict processing;
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
13. Your GDPR Rights
If GDPR applies, you may have the right to:
- Access your personal data;
- Correct inaccurate data;
- Request erasure (“Right to be Forgotten”);
- Restrict processing;
- Data portability;
- Object to processing;
- Withdraw consent at any time;
- Not be subject solely to automated decision-making.
Requests may be submitted using the contact information provided below.
14. Children’s Privacy
Our products and services are not directed to children under the age of 18.
We do not knowingly collect personal information from children.
If we become aware that personal information of a child has been collected without appropriate authorization, we will take reasonable steps to delete it.
15. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of external websites.
Users should review the privacy policies of those websites separately.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Changes will be posted on this page together with the updated effective date.
Where required by law, we will notify users of significant changes.
Continued use of our services after updates constitutes acceptance of the revised Privacy Policy.
17. Contact Us
If you have questions about this Privacy Policy, your personal data, or wish to exercise your privacy rights, please contact:
Mahare Coffee Roasters and Traders Ltd
Email: [privacy@maharecoffee.com]
If you are dissatisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya or your local supervisory authority where applicable.