1. Introduction
SARBERT Imports ("SARBERT Imports", "we", "us") operates this platform and is the data controller of the personal data described here. We respect your privacy and handle your personal data in accordance with the Data Protection Act, 2019 (Kenya) and this policy, which covers our information and guidance sessions, supplier/marketplace access, and related services.
2. Information we collect
We collect the following, mainly from you directly:
- Account details — name, email, phone number, and login credentials
- Booking information — sessions booked, dates/times, and your stated import interests
- Payment information — M-Pesa and card payment references (card details are processed by Paystack; we do not store your full card number)
- Support tickets and communications
- Usage and technical data needed to operate, secure, and improve the Platform
3. How we use your information
We use your information to:
- Provide and confirm bookings, session links, reminders, and supplier/marketplace access
- Process payments and issue receipts
- Respond to support requests and operate, secure, and improve the Platform
- Send service-related notifications (e.g. booking reminders)
- Send marketing where you have consented or not opted out
- Comply with legal obligations and protect our rights
4. Data sharing
We do not sell your personal data. We share it only as needed to run the Platform, with processors such as payment providers (Safaricom M-Pesa and Paystack), our meeting provider (Google, for Google Meet/Calendar links), email/communication providers, and hosting/infrastructure providers. We may also disclose information where required by law or to protect our users, the public, or our rights.
5. International transfers
Some processors (for example, Paystack and Google) may process data outside Kenya. Where this happens, we take reasonable steps to ensure your data is protected consistent with the Data Protection Act, 2019.
6. Data retention
We keep personal data only as long as necessary for the purposes above, including to provide the service and meet legal, accounting, and tax obligations, resolve disputes, and enforce our agreements, after which it is deleted or anonymised.
7. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and authentication — to protect your data. No system is completely secure; you are responsible for keeping your login credentials and any two-factor authentication secure.
8. Your rights under the Data Protection Act, 2019
Subject to the Act, you have the right to be informed about, access, correct, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.
9. Cookies
We use cookies and similar technologies necessary to operate the Platform (for example, to keep you signed in) and, where applicable, to understand usage and improve the service. You can control cookies through your browser settings; disabling some may affect how the Platform works.
10. Children
The Platform is intended for adults and is not directed at children. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date shows the latest version. Material changes will be communicated where appropriate.
12. Contact
For privacy-related questions or to exercise your rights, contact us via the Support page or the contact details on our Platform.