Privacy Policy

1. Introduction

Transafrica Medical Supplies Limited ("we", "us", or "our") is a company incorporated in Kenya engaged in the importation and distribution of dental equipment, consumables, biomaterials, and related products. We are committed to protecting the privacy and personal data of our customers, website visitors, business partners, and any other individuals who interact with us.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information in accordance with the Kenya Data Protection Act, 2019, and other applicable laws.

By visiting our website at transafricamedical.co.ke, placing an order, subscribing to our newsletter, or otherwise engaging with our services, you agree to the practices described in this Policy.

2. Information We Collect

2.1 Information You Provide Directly

• Full name, job title, and professional credentials (e.g., dentist, lab technician)
• Business name and practice details
• Email address, phone number, and physical address
• Order details and payment information (processed securely; card data is not stored by us)
• Enquiries, messages, or feedback submitted via our contact form or email
• Newsletter subscription preferences

2.2 Information Collected Automatically

• IP address and browser type
• Pages visited and time spent on the website
• Referring URLs and device information
• Cookies and similar tracking technologies (see Section 7)

2.3 Information from Third Parties

We may receive information about you from partners, referrals, or publicly available business directories where relevant to our services.

3. How We Use Your Information

We use your personal data for the following purposes:

• Processing and fulfilling your orders for dental equipment and supplies
• Responding to enquiries, quotes, and customer support requests
• Sending order confirmations, invoices, and delivery updates
• Sending newsletters and promotional content (only with your consent)
• Improving our website, products, and services through analytics
• Complying with legal and regulatory obligations in Kenya
• Conducting training events, webinars, and product demonstrations
• Managing our business relationships with dental practices and laboratories

4. Legal Basis for Processing

Under the Kenya Data Protection Act, 2019, we process your personal data on the following legal grounds:

• Contract performance — to fulfill orders and service agreements you enter with us
• Legitimate interests — to manage our business operations, prevent fraud, and improve our services
• Consent — for marketing communications and newsletter subscriptions (you may withdraw consent at any time)
• Legal obligation — to comply with applicable Kenyan laws and regulatory requirements

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your data with:

• Logistics and courier partners for order delivery
• Payment processors for secure transaction handling
• Our brand partners and manufacturers where necessary to fulfil specialist orders or warranty claims (e.g., Straumann, Dentsply Sirona, Dürr Dental)
• Email marketing platforms (e.g., Mailchimp) for newsletter delivery
• IT and website service providers who support our online operations
• Regulatory or government authorities when required by law

All third parties we work with are required to handle your data securely and in accordance with applicable data protection laws.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order and transaction records: 7 years (in accordance with Kenyan tax and commercial law)
• Customer account information: for the duration of the business relationship plus 3 years
• Newsletter subscribers: until you unsubscribe
• Website analytics data: up to 26 months in aggregate form

When data is no longer required, we securely delete or anonymise it.

7. Cookies and Tracking Technologies

Our website uses cookies — small text files stored on your device — to enhance your browsing experience. We use:

• Essential cookies: required for the website to function correctly
• Analytics cookies: to understand how visitors interact with our site (e.g., Google Analytics)
• Preference cookies: to remember your settings and preferences

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

8. Your Data Protection Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data where there is no lawful basis for continued processing
• Restriction — request that we limit how we process your data
• Objection — object to processing based on our legitimate interests
• Portability — request your data in a structured, machine-readable format
• Withdraw consent — at any time where processing is based on consent, without affecting prior lawful processing

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 21 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

• SSL/TLS encryption on our website
• Restricted internal access to personal data on a need-to-know basis
• Regular security reviews of our systems and third-party providers

While we take reasonable precautions, no method of transmission over the internet is 100% secure. Please contact us immediately if you suspect any unauthorised use of your data.

10. Third-Party Links

Our website may contain links to third-party websites, including our brand partners such as Straumann, Dentsply Sirona, botiss biomaterials, and others. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated policy will be posted on our website with the revised effective date. We encourage you to review this page periodically. Continued use of our services after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: