1. Introduction

Shredah Investment Limited ("Shredah," "we," "us," or "our") is committed to protecting your personal data in compliance with the Data Protection Act, 2019 (No. 24 of 2019) of Kenya and any subsidiary regulations issued by the Office of the Data Protection Commissioner (ODPC).

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access our website at www.shredahinvestments.co.ke or engage our fleet management, logistics, leasing and corporate transport services (the "Services").

Data Controller: Shredah Investment Limited
P.O. Box 87943-00100, Nairobi, Kenya
Email: info@shredah.co.ke
Phone: +254 724 729 433

2. Information We Collect

We collect the following categories of personal data:

Identity data: full name, national ID or passport number, driver's licence details (for corporate transport / leasing clients).
Contact data: phone number, email, postal and physical address.
Business data: company name, KRA PIN, procurement contact.
Transactional data: service bookings, quotes, invoices, payment references.
Vehicle & telematics data: GPS location, route history, driver behaviour (for leased or tracked vehicles), only where authorised.
Technical data: IP address, browser type, device information, pages visited, cookies (see our Cookie Policy).

3. Legal Basis for Processing

Under the Data Protection Act, 2019, we process your personal data on the basis of:

Consent — where you have explicitly agreed (e.g. contact form, quote request, newsletter).
Contractual necessity — to perform a service contract with you.
Legal obligation — tax, transport, insurance and NTSA compliance.
Legitimate interest — fleet security, fraud prevention, service improvement.

4. How We Use Your Information

Respond to enquiries, quotes and service requests.
Deliver logistics, leasing, corporate transport and fleet management services.
Manage billing, invoicing and payment reconciliation.
Ensure vehicle, driver and cargo security through telematics.
Comply with legal, regulatory and contractual obligations.
Improve our website, communications and customer experience.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share limited data with vetted third parties only where necessary:

Insurance underwriters and NTSA for vehicle compliance.
Payment processors and banks for transactions.
IT, telematics and hosting providers under written data processing agreements.
Regulators, courts or law enforcement when legally required.

6. International Transfers

Where personal data is transferred outside Kenya (e.g. cloud hosting), we ensure the receiving jurisdiction provides adequate protection or that appropriate safeguards are in place as required by Section 48 of the Data Protection Act, 2019.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal, tax and accounting obligations (typically 7 years for financial records).

8. Your Rights as a Data Subject

Under the Data Protection Act, 2019, you have the right to:

Be informed of the use of your personal data.
Access your personal data.
Object to processing or withdraw consent.
Correct false or misleading data.
Request deletion of your data where legally permissible.
Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any of these rights, contact us at info@shredah.co.ke.

9. Data Security

We implement appropriate technical and organisational measures — encryption, access controls, staff training, secure backups — to protect personal data against loss, misuse or unauthorised access.

10. Children's Privacy

Our services are directed to businesses and adults. We do not knowingly collect personal data from children under 18 without verifiable parental or guardian consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will indicate the latest revision.

12. Contact Us

For any questions, requests or complaints regarding this Privacy Policy or your personal data:

Shredah Investment Limited
P.O. Box 87943-00100, Nairobi, Kenya
Email: info@shredah.co.ke
Phone: +254 724 729 433 / +254 712 266 052