Privacy Policy 

Effective Date: February 1st, 2026

Introduction
African Cotton Industries Limited respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, process, store, secure, and retain your personal data when you visit or make a purchase through our website, including any mobile versions or applications (“Service”). This policy also explains your rights under applicable data protection laws, including the Kenya Data Protection Act, 2019 (“KDPA”). 
By accessing or using our Service, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. 
Definitions
Personal Data: Any information relating to an identified or identifiable individual (e.g., name, email, phone, location).
Service Providers: Third-party companies or individuals who help with our business operations (e.g., payment processors, analytics).
Cookies: Small text files placed on your device by a web server to store data about your session or preferences. 
3. Information We Collect
3.1 Personal Information You Provide – We collect information you voluntarily provide when you interact with our Service, including: 

• Name 
• Email address 
• Phone number 
• Shipping/billing address 
• Location data (where applicable for delivery) 
• Account credentials 
• Payment information (processed via secure third-party services) 

This information is necessary for e-commerce functionality (order processing, shipping and support).
3.2 Automatically Collected Data – We automatically collect certain data when you visit our Service, including: 

• IP address 
• Browser and device information 
• Pages visited 
• Time and date of visit 
• Usage analytics using cookies and similar technologies

3.3 Cookies and Tracking – We use cookies and similar tracking technologies to operate the Service, under user behavior, and provide personalized experiences. You may be provided with a cookie notice banner for consent where required, and you may adjust your browser settings to reject non-essential cookies.
4. Legal Basis for Processing
We process Personal Data based on one or more of the following legal bases: 

• Performance of a contract: Processing necessary to fulfil your orders or requests. 
• Consent: Where you have opted in for specific purposes (e.g., marketing). 
• Legitimate interests: For analytics, fraud prevention, and site improvements. 
• Legal obligations: To comply with laws and regulatory requirements. 

5. How We Use Personal Information
We use your data for purposes including: 

• To provide, maintain, and improve the Service 
• To process and fulfil orders 
• To communicate about orders, updates, and support 
• To send newsletters and promotional offers (with your consent) 
• To detect and prevent fraud, legal violations, or security issues 
• To comply with legal obligations 

6. Sharing and Disclosure of Personal Data
We may share your Personal Data with: 

• Service Providers – Third parties who assist in operating our Service (e.g., payment processors, shipping partners, cloud hosting). These partners may process data only as needed to provide services to us.
• Legal & Safety – We may disclose data to comply with applicable laws, respond to lawful requests, enforce terms, or protect rights and safety.
• Mergers or Acquisitions – If our business is sold or merged, Personal Data may be transferred as part of that transaction. We do not sell your Personal Data to third parties. 

7. Data Security
We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, misuse, or alteration. These measures include encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure, and absolute data security cannot be guaranteed. 
8. Data Retention
We retain Personal Data only as long as necessary for the purposes stated or as required by law. When data is no longer needed, we securely delete or anonymize it. 
9. Your Rights Under Data Protection Law
Under applicable law, including the KDPA(Kenya Data Protection Act), you may have the right to: 

• Access the Personal Data we hold about you 
• Correct or update inaccurate data 
• Request deletion of your data (right to be forgotten) 
• Object to or restrict processing 
• Withdraw consent (where processing is based on consent) 
• Lodge a complaint with the Office of the Data Protection Commissioner 

To exercise these rights, contact us as set out below.  
10. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for their privacy practices. You should read their privacy policies before providing any Personal Data.
11. Children’s Privacy
Our Service is not directed at children under 18. We do not knowingly collect Personal Data from children under 18. If you believe we have collected such information, please contact us so that we can delete it.  
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will post the revised policy with an updated effective date on this page. 
13. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, contact: 
Email: care@africancotton.com 
Phone: +254 700 555 999  
Address: Kutch Road, Mlolongo,