Privacy Policy

We are an agro-export company registered in Kenya, based at Bargentuny Plaza, Eldoret, Uasin Gishu County, Kenya. For any privacy question or request, contact us at eldolinkexportslimited@gmail.com or +254 722 399 684.

• Contact and quote details — name, company, email, phone, country, products of interest, volumes and notes you submit through our quote or contact forms.
• Account data — for client portal users: name, email, password (stored only as a salted hash by our authentication provider), and role.
• Trade records — quotations, orders, shipments, invoices and export documents relating to your business with us.
• Technical data — IP address, browser type, pages visited and error logs, used to keep the site secure and working.

We do not collect payment card data on this website and we do not knowingly collect data from children.

• To respond to quote requests and prepare offers, contracts and export documentation.
• To operate your client portal account and show you your own quotes, orders, shipments and invoices.
• To meet legal, customs, phytosanitary, tax and accounting obligations in Kenya and destination markets.
• To secure our systems, detect abuse and improve the website.

Our lawful bases are your consent (forms and marketing), performance of a contract (orders and shipments), legal obligation (export and tax records) and legitimate interest (security).

We share data only where necessary: with freight forwarders, clearing agents, inspection bodies and government authorities involved in your shipment; with our hosting, database and email providers acting on our instructions; and where required by law. We never sell your personal data.

Data is held in secure, access-controlled cloud infrastructure that may be located outside Kenya. Where data leaves Kenya we rely on providers offering equivalent protection and contractual safeguards. Trade and accounting records are kept for at least seven years; enquiry data is kept no longer than three years after our last contact, unless you ask us to delete it earlier.

• Encryption in transit (HTTPS) on every page and API request.
• Row-level database security so each client account can only read its own records.
• Role-based staff access (staff, manager, admin, super admin) with least-privilege permissions.
• Server-side verification of every privileged action, audit trails and monitored error logging.

You may request access to your data, correction of inaccurate data, deletion, restriction of processing, a portable copy, or withdrawal of consent at any time. Email eldolinkexportslimited@gmail.com and we will respond within 30 days. You may also lodge a complaint with the Office of the Data Protection Commissioner (Kenya).

We use only essential storage — a secure session token to keep you signed in and a local preference store (for example your saved products and whether you have seen the portal tour). We do not run third-party advertising trackers.

We may update this policy as our services or the law change. The date at the top always shows the current version. Material changes affecting portal clients will be notified by email.