Windfon Technologies

Legal

Privacy Policy

How WINDFON TECHNOLOGIES LTD. collects, uses and protects your personal data, in line with the Data Protection Act, 2019 of Kenya.

Last updated: 7 October 2026

In brief

  • We only collect the details you choose to send us, such as your name, contact details and what you need.
  • We use them to answer your enquiry, prepare quotes and supply your order. We do not sell your data.
  • Messages sent through our website forms are emailed straight to our team. They are not stored on the website.
  • You can ask to see, correct or delete your data at any time by emailing Windfontech@yahoo.com.

1. Who we are

This website is operated by WINDFON TECHNOLOGIES LTD. ("WINDFON TECHNOLOGIES LTD.", "we", "us"), a supplier of aviation lubricants, consumables, aircraft spares and industrial products based at Wilson Airport, Nairobi. For the personal data described in this policy, WINDFON TECHNOLOGIES LTD. is the data controller under the Data Protection Act, 2019 (the "Act").

2. Data we collect

Information you give us

When you contact us, request a quote or place an order, by our website, email, WhatsApp, telephone or in person, we may collect:

  • Identity and contact details: your name, company or organisation, job role, email address, telephone or WhatsApp number and delivery address.
  • Enquiry details: the products, part numbers, quantities, aircraft or equipment and delivery requirements you tell us about, and any lists or documents you send.
  • Business and transaction details: quotes, orders, invoices, payments and correspondence with you.

How our website forms work

When you send the Request a Quote or Contact Us form, the details you enter, and any files you attach, are sent by email to our team, and a copy of your message is emailed back to you. The website does not keep a copy of your message in its database, and attached files are deleted from the web server as soon as the email has been sent. If you choose Send on WhatsApp instead, WhatsApp opens with your message and nothing is sent until you send it there.

Information collected automatically

Like most websites, our web server records basic technical information when you visit, such as your IP address, browser type and the pages you view. This is used to keep the website running and secure. We do not use this information to identify you.

We do not ask for, and ask you not to send us, sensitive personal data such as health information.

3. How we use your data

We use your personal data to:

  • respond to your enquiries and give technical advice;
  • prepare quotes, source products and confirm availability and lead times;
  • process and deliver orders, including shipping, customs and certification paperwork;
  • issue invoices, receive payments and keep accounting records;
  • manage our relationship with you, including service updates about your orders;
  • keep our website and systems secure; and
  • meet our legal and regulatory obligations.

We will only send you marketing messages if you have agreed to receive them, and you can opt out at any time.

4. Lawful basis

Under the Act we process your personal data on one or more of these grounds:

  • Contract: to take steps you ask for before entering a contract, such as preparing a quote, and to perform a contract with you.
  • Consent: where you agree to us using your data for a purpose, for example by ticking the consent box on our forms. You may withdraw consent at any time.
  • Legal obligation: to comply with the law, for example tax, customs and aviation record keeping requirements.
  • Legitimate interests: to run and improve our business and keep our systems secure, where this does not override your rights.

5. Sharing your data

We do not sell or rent your personal data. We share it only where needed for the purposes above, with:

  • Manufacturers and suppliers, where needed to source a product or confirm specifications for your order;
  • Logistics, freight and clearing agents, to ship and deliver your order;
  • Service providers who support our business, such as our email, messaging, website hosting and accounting providers;
  • Professional advisers such as auditors and lawyers; and
  • Government and regulatory authorities, such as the Kenya Revenue Authority or the Kenya Civil Aviation Authority, where the law requires it.

Anyone who handles personal data for us is expected to keep it confidential and secure and to use it only for the purpose we share it for.

6. Transfers outside Kenya

Some of our service providers, such as our email and messaging providers, and some of the manufacturers we source from, are based or store data outside Kenya. When personal data is transferred outside Kenya, we take steps to ensure it is protected as required by the Act, for example by using reputable providers with appropriate data protection safeguards, and we only transfer what is needed for the purpose.

7. How long we keep data

We keep personal data only for as long as needed for the purpose it was collected for, or as required by law:

  • Enquiries and quotes that do not lead to an order are kept for up to two years, so we can follow up and answer questions about them.
  • Orders, invoices and related records are kept for as long as tax, customs and aviation record keeping laws require.

When data is no longer needed, we delete it or make it anonymous.

8. Security

We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including limiting access to people who need it. No method of sending data over the internet is completely secure, so please avoid sending highly confidential information by email or WhatsApp. If a data breach puts your rights at risk, we will notify you and the Data Protection Commissioner as the Act requires.

9. Your rights

Under the Act you have the right to:

Be informedof how your personal data is used.
Accessthe personal data we hold about you.
Objectto the processing of all or part of your data.
Correctionof false or misleading data.
Deletionof false or misleading data, or data we no longer need.
Portabilityreceiving your data in a commonly used format.
Withdraw consentat any time, where we rely on consent.
Complainto the Office of the Data Protection Commissioner.

To use any of these rights, email Windfontech@yahoo.com. We may ask you to confirm your identity before acting on a request, and we will respond within the time set by the Act.

10. Cookies and third party content

Our website uses only the cookies needed for it to work. Some pages include content from other providers, which may set their own cookies or collect technical information such as your IP address when the page loads:

  • Google Maps on our Contact Us page, to show our location;
  • Google Fonts, to display our website text; and
  • WhatsApp, if you choose to contact us through a WhatsApp link.

These providers handle data under their own privacy policies. You can block or delete cookies in your browser settings; the website will still work, although embedded content such as the map may not display.

11. Children

Our products and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time, for example if we change how our website works. The latest version will always be on this page, with the date it was last updated at the top.

13. Contact us and complaints

If you have a question about this policy or how we handle your personal data, please contact us first and we will do our best to help:

If you are not satisfied with our response, you have the right to complain to the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.