The ownership and operation of the Site belong to NatuAsili, which, along with our affiliates, is referred to as “us,” “we,” or “our,” depending on the context. The purpose of this Privacy Policy, also known as “Policy,” is to inform users of www.natuasili.com (the “Site”) about our policies and procedures concerning the collection, use, and disclosure of personal information.

Our Privacy Policy applies at all times when using our website and/or any of our services. Any new features and/or services added to our current service in the future will also be subject to the terms outlined in this Privacy Policy. As the controller, NatuAsili explains how and why personal data originating from you is collected and processed in this Privacy Policy. If you are not comfortable with what is stated below regarding the processing of personal data, you should not use our services. Your continued use of our services constitutes consent to this policy.

Information collection

We gather information about you through both your voluntary submission and automatic means. The following categories of information are collected:

• Personal data submitted by you through forms on our website
• Identification of your device, browser, operating system, and IP address
• Your browsing behavior
• Sites visited before and after your visit to our site

To obtain this information, we use the following methods:

• Forms that you complete on our site
• Cookies (for further details, please refer to our Cookie Policy)
• Third-party service providers who collect information on our behalf (for more information, please refer to our Cookie Policy)

We accept online payments in Kenyan shillings through M-Pesa, Visa, and Mastercard credit/debit cards. If you choose to make a payment for our products or services on our website, your payment details will be transmitted directly to our payment provider through a secure connection. You, as the cardholder, are responsible for maintaining transaction records, as well as adhering to our policies and regulations.

Use of personal information

The information we collect is utilized in the following ways:

• To offer our services to you as a registered or unregistered user of our site
• To manage and enhance the performance of our products and services
• To customize our promotional communications based on your usage of our site or services
• For audit and reporting purposes
• For security measures, to safeguard the legal rights of ourselves, our employees, agents, or others, and to comply with legal requirements and government requests.
• We will not keep your data for any longer than is necessary for legal obligations or our legitimate business interests.

Disclosure of personal information

We do not sell, share, rent, or lease credit/debit card details or personally identifiable information to any third parties. However, we may disclose personal information in certain circumstances and to specific parties. This includes:

Other companies that are affiliated with NatuAsili operate under this policy.

• Service providers who perform services on our behalf, such as web hosting, email service providers, payment processing, and analytics. We may need to share your personal information with them for the purposes described above. These service providers are located worldwide, and any international transfer of your personal information follows appropriate safeguards.
• Third parties as required by law or necessary to provide and protect our services or in connection with a corporate transaction.
• Third-party partners with your explicit consent provide you with special offers, promotional materials, and other materials that may interest you.
• Aggregated information that does not identify specific individuals.

Information security and privacy incident reporting

We’re employing practical technical and organizational precautions to protect your data from any unintentional or illegal destruction, loss, alteration, or damage. However, it’s essential to acknowledge that no security program is infallible, and as a result, we can’t guarantee the absolute security of your personal or other information.

We’ve established a comprehensive procedure to address any potential data privacy incident and minimize its repercussions. In the event of a data privacy incident (breach), you’ll be notified as soon as the situation is taken into account. Furthermore, the relevant Data Protection Authority will be notified within 72 hours of the incident’s detection.

Your rights related to your data

You have the following rights with respect to your personal information that we maintain:

• Right of Access: You have the right to confirm if we are processing your data and to obtain information about the purposes of the processing, retention period (and the criteria for determining it), recipients to whom we have disclosed your data, and a copy of your data
• Right to Data Portability: You have the right to receive your data, provided to us, in a structured, commonly used, and machine-readable format.
• Right to Rectification: You have the right to correct any incomplete or inaccurate personal data that we hold about you.
• Right to Erasure: In certain circumstances, you have the right to request that we delete personal data that we hold about you.
• Right to Restrict Processing: In certain circumstances, you have the right to request that we limit the processing of your data.
• Right to Object: You have the right to object to our processing of your data. However, we may have compelling reasons to continue processing your data. We will assess your request and respond accordingly. Marketing activities are not considered a compelling reason.

Finally, you have the right to complain to your local data protection authority.

Policy towards children

Our services are intended for individuals who are at least 18 years old unless otherwise stated. We do not knowingly collect personal data from individuals under 18 years of age without prior parental consent. If you become aware that your child has provided us with personal data without your prior consent, please inform us at [email protected] so that we can delete this information and terminate any account that your child may have created with us.

Updates to this Policy

The Privacy Policy for the NatuAsili Site is subject to occasional changes or updates, which may be necessary to comply with legal, technological, or operational requirements and standards. We recommend that you regularly check this policy to remain informed about any updates. If any significant changes are made, we will inform you in advance before they take effect. The modifications will come into effect on the day they are published.

Contact Details

If you have any questions about this Privacy Statement, you can contact us by email, phone, or at the postal addresses below:

    » Full name of legal entity: NatuAsili (a division of PitchKambi Company Limited)

    » Email address: [email protected]

    » Postal address: 58029 – 00200, Nairobi – Kenya