Privacy Policy
Last updated: 13 October 2026
This policy explains how Kenya Coach Industries Limited ("KCI", "we", "us") collects and uses personal data when you use this website, create an account, place an order, or contact us. We handle personal data in line with the Data Protection Act, 2019 of Kenya and its regulations.
1. Who we are
Kenya Coach Industries Limited is the data controller for the personal data described in this policy. We sell Isuzu vehicles and genuine parts, build bus and truck bodies, and provide after-sales service from East Gate Road, off Mombasa Road, Nairobi, Kenya.
Contact for anything in this policy: Info@kci.co.ke.
2. Personal data we collect
We collect only what we need for the purposes in section 3.
| Category | What it includes | Source |
|---|---|---|
| Account | Name, email address, phone number, profile photo, sign-in credentials | You, when you register or sign in |
| Profile and verification | Individual or company type, company name and type, ID type and number, KRA PIN, copies of ID, KRA PIN certificate, CR12 or business registration documents | You, when you complete your profile or apply for a trade account |
| Orders and payments | Items ordered, order totals, order and payment references, payment method and status, VAT and discount details | You, and our payment service provider |
| Delivery | Recipient name, phone number, delivery address, delivery status, driver name and phone, tracking link | You, and our delivery partners |
| Vehicles | Make, model, year, VIN, number plate | You, when you save a vehicle |
| Enquiries | Name, email address, your message, IP address and browser type | You, when you use the contact form |
| Technical | IP address, device and browser information, and the cookies described in our cookie policy | Your device, automatically |
We do not collect payment card or mobile money PINs. Payments are taken on our payment provider's page, and we receive only the result and a reference.
3. How and why we use it
Under the Data Protection Act we need a lawful basis for each use of personal data.
| Purpose | Lawful basis |
|---|---|
| Create and manage your account; verify your identity and, for trade accounts, your business | Performance of a contract; our legitimate interest in preventing fraud |
| Process orders, take payment, arrange delivery and issue invoices | Performance of a contract |
| Record sales and customers in our accounting and stock systems | Performance of a contract; legal obligation |
| Keep tax and accounting records, including VAT and KRA PIN details | Legal obligation |
| Send order confirmations, delivery updates, one-time codes and account notices | Performance of a contract |
| Reply to enquiries and provide after-sales support | Performance of a contract; legitimate interest |
| Secure the website, prevent fraud and abuse | Legitimate interest; legal obligation |
| Optional features, such as the embedded map | Your consent, which you can withdraw at any time |
We do not sell personal data. We do not use it for advertising, and we do not make decisions about you based solely on automated processing.
4. Who we share it with
We share personal data only with service providers acting on our instructions, and with authorities where the law requires it. Each recipient receives only what it needs for its task, and our service providers are bound by contract to protect it.
| Recipient | Why |
|---|---|
| Payment service providers | To process your payment |
| Delivery partners and drivers | To deliver your order to you |
| Identity and tax verification services | To verify your identity and KRA PIN |
| Communication service providers | To send you codes, order updates and replies by SMS and email |
| Technology and hosting service providers | To run, secure and support our website and systems |
| Professional advisers and auditors | To obtain legal, accounting and audit services |
| Regulators, courts and law enforcement | Where the law requires or allows disclosure, or to protect our rights |
If our business or assets are sold or restructured, personal data may be transferred to the new owner, who must continue to protect it under this policy.
5. Transfers outside Kenya
Your personal data may be stored or processed in Kenya and in other countries where we or our service providers operate. Where we transfer it abroad, we do so only as the Data Protection Act allows, with appropriate safeguards or with your consent where that is required.
6. How long we keep it
- Account and profile data: while your account is open, and for a reasonable period after you close it.
- Order, invoice and tax records: at least five years, as Kenyan tax law requires.
- Identity and verification documents: while your account is active, then deleted once we no longer need them.
- Enquiries: for as long as needed to deal with your request and any follow-up.
When data is no longer needed, we delete it or anonymise it. Data we must keep by law stays locked away from other uses until the retention period ends.
7. How we protect it
We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, and we limit access to staff who need it. No system is completely secure. If a breach is likely to put your rights at risk, we will notify you and the Office of the Data Protection Commissioner within the time the law requires.
8. Your rights
Under the Data Protection Act, 2019, you have the right to:
- be informed how your personal data is used (this policy);
- access the personal data we hold about you;
- object to our processing of your personal data;
- have inaccurate or incomplete data corrected;
- have data deleted when we no longer have a lawful reason to keep it;
- receive your data in a structured, commonly used format, and ask us to send it to another controller;
- withdraw consent at any time, without affecting what we did before you withdrew.
To use any of these rights, email Info@kci.co.ke. We may ask you to confirm your identity first. We aim to respond within 30 days. You can update most account details yourself on your profile page.
9. Cookies
We use essential cookies and storage to keep you signed in and hold your cart. Optional services only run with your consent. See our Cookie Policy for the full list, or .
10. Children's data
This website is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, email us and we will delete it.
11. Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell you on the website or by email.
12. Contact and complaints
Kenya Coach Industries Limited, East Gate Road, off Mombasa Road, Nairobi, Kenya.
Email: Info@kci.co.ke
Phone: 0722 237231 or 0733 618866
If you are not satisfied with how we handle your personal data, you can complain to the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke). We would appreciate the chance to resolve it with you first.