Privacy notice

This notice explains how Twilight Infotec Trading Limited (“we”, “us”) collects and uses personal data when you use this website, contact us or place an order. It is written to meet the Data Protection Act, 2019 of Kenya.

Who we are

Twilight Infotec Trading Limited is the data controller for the personal data described here. Our head office is on Ngong Road, Nairobi, Kenya. For any privacy question or request, email info@twilightinfotec.com.

What we collect

We collect only what you choose to send us:

Contact details: your name, company, phone or WhatsApp number and email address.
Enquiry details: what you need, delivery town, messages, and details of machines or parts.
Attachments: bills of quantities, material lists, drawings, photos, catalogues or CVs that you upload or send.
Messages: what you send us by email or phone.
WhatsApp: if you message us on WhatsApp, we receive your WhatsApp number, your profile name and what you send, including photos, voice notes and documents.
Technical data: the website’s hosting provider keeps short-lived server logs (such as IP address and pages requested) for security and to keep the site working. Our analytics are cookieless and do not identify you.

We do not ask for sensitive personal data. Please do not send it to us.

Why we use it

To reply to your enquiry and prepare a quotation.
To source, document and deliver an order, and to manage the contract with you.
To consider a job application you send us.
To register you as a supplier and send you requests for quotation.
To reply to you on WhatsApp, if you message us there or tick “You may also reply to me on WhatsApp” on a form. You can tell us to stop at any time.
To keep our website secure and understand, in aggregate, how it is used.
To protect our staff and customers from spam, fraud and harmful files. Every form you send is checked automatically: for example how quickly it was filled in, whether the email address can receive mail, the connection it came from, links in the text and the type of any file. Submissions the check is unsure about are held for a member of staff to review before they are answered. No decision about you is made by the check alone.
To meet our legal, tax and accounting obligations.

Our lawful bases

We rely on your consent when you submit a form, on steps you ask us to take before entering a contract and on performing a contract when you order, on our legitimate interests in running and securing our business, and on legal obligations where the law requires us to keep records.

You can withdraw your consent at any time by emailing us. This does not affect anything we did before you withdrew it.

Who sees your enquiry

Your enquiry goes to the desk that handles it, for example quotations, equipment parts or accounts. Our staff read and answer enquiries in our company email system and in a staff-only enquiry system that needs a password and a second sign-in step. Each person sees only the desks they work on, and replies, notes and status changes are logged.

Our supply partners, only as far as needed to price and fulfil your order (for example, a part description, quantities and the delivery point). We do not give them more than they need.
Service providers that process data for us, under contracts that require them to protect it:
- Vercel Inc. hosts this website and runs its forms and staff enquiry system.
- Hetzner Online GmbH runs our email servers, in a data centre in Finland, where enquiries and our replies are stored.
- WhatsApp (Meta Platforms) carries the messages when you contact us on WhatsApp or ask us to reply there. WhatsApp’s own terms and privacy policy also apply to your use of WhatsApp.
Authorities, where an import permit, customs declaration or the law requires it.

We do not sell your personal data, and we do not use it for advertising.

Transfers outside Kenya

Some of our supply partners and service providers are outside Kenya. Our supply partners are in the Gulf and Asia. Our email servers are in Finland, in the European Union. Our website host is based in the United States and serves the site from data centres in several countries, and WhatsApp messages are handled by Meta’s systems. When we transfer personal data outside Kenya, we do so only as the Data Protection Act allows, with appropriate safeguards, and only the data needed for the purpose.

How long we keep it

We keep personal data for as long as we need it for your enquiry or order, and afterwards for as long as the law requires (for example, tax and accounting records). Applications and supplier registrations that do not lead to a role or an order are deleted when they are no longer relevant. The same applies to the copies kept in our email system and staff enquiry system, including WhatsApp messages.

Your rights

Under the Data Protection Act, 2019 you have the right to:

be informed of how your data is used;
access the personal data we hold about you;
ask us to correct data that is wrong or incomplete;
ask us to delete data, or to restrict how we use it;
object to processing, including for direct marketing;
receive your data in a portable format where the law provides for it.

To use any of these rights, email info@twilightinfotec.com. If you are not satisfied with our reply, you can complain to the Office of the Data Protection Commissioner (ODPC).

Cookies

We do not use tracking or advertising cookies. See our cookie notice.

Changes to this notice

We may update this notice. The date at the top shows when it last changed.