Legal
Privacy Policy
This policy explains how Agri-Sankofa collects and uses personal information.
Last updated: 26 October 2026
Agri-Sankofa Millers Limited ("Agri-Sankofa", "we", "us") respects your privacy. This policy explains what personal data we collect when you use this website and our online store, why we collect it, how we use and protect it, and what rights you have under the Data Protection Act, 2019 of Kenya.
1. Who we are
Agri-Sankofa Millers Limited is a milling and agri-processing company operating in Busia, Kakamega, Bungoma and Siaya Counties, Kenya.
- Name: Agri-Sankofa Millers Limited
- Contact for privacy matters: info@shemeji.africa
- Postal address: MURBS Building, 2nd Floor, Opposite Kiwasco, Makasembo Road, Kisumu City, Kenya
We are the data controller for personal data collected through this website and online store.
2. Personal data we collect
We collect only what we need to run the website, process your orders, and communicate with you.
Information you give us directly
- Name and contact details: email address and phone number
- Delivery details: delivery address and any delivery instructions
- Order details: products ordered, quantities, and order history
- Business details, for trade customers: business name, registration details, and contact person
- Job applications: your name, contact details, the introduction you write, any LinkedIn profile you give us, and your CV, when you apply through our Join the Team page
- Messages: anything you send us through the contact form or by email
Information collected automatically
- Device and browser information, such as device type, browser type, and approximate location derived from IP address
- Pages visited and time spent on pages
- We do not currently use analytics tools on this website. If we add them, we will update this policy before they go live.
Payment information
We do not store your M-Pesa PIN or full card numbers. Payments are processed by M-Pesa, operated by Safaricom PLC, by our bank for bank transfers, and by PesaPal. Cash on delivery payments are recorded by our delivery team. We receive only the transaction confirmation needed to record your order, such as a payment reference, amount and date.
3. How we use your personal data
We use your personal data for the following purposes:
| Purpose | Legal basis under the Data Protection Act, 2019 |
|---|---|
| To process and deliver your orders | Performance of a contract |
| To manage your account and trade credit terms | Performance of a contract |
| To send order confirmations, delivery updates and service messages | Performance of a contract |
| To respond to your enquiries | Legitimate interest, or your consent where you contact us for a specific request |
| To send marketing messages about our products | Your consent, which you can withdraw at any time |
| To keep accounting and tax records | Compliance with a legal obligation |
| To improve the website and understand how it is used | Legitimate interest, or your consent where required |
| To consider your job application and contact you about roles | Your consent, given when you submit the application |
| To prevent fraud and keep our systems secure | Legitimate interest |
We do not sell your personal data.
4. Sharing your personal data
We share personal data only where necessary:
- Delivery partners, to deliver your orders
- Payment providers, to process your payments
- Service providers that host our website, handle email, or support our accounting, under written agreements that require them to protect your data
- Regulators and authorities, where required by law
- Our professional advisers (for example, lawyers and auditors), under confidentiality obligations
5. Transfers outside Kenya
Some of our service providers may store or process data outside Kenya. Where this happens, we make sure the transfer meets the requirements of the Data Protection Act, 2019, including appropriate safeguards and, where required, confirmation that the receiving country provides adequate protection.
6. How long we keep your data
We keep personal data only as long as needed for the purpose it was collected for:
- Order records: for 2 years after the order.
- Trade account records: for the duration of the trading relationship and the period required by law afterwards.
- Marketing preferences: until you unsubscribe, plus a short period to keep your preference on record.
- Job applications, including CVs: six months after we receive them, unless you ask us in writing to keep your application on file for longer. CVs are sent to our recruitment inbox and are not stored on this website. We delete them from that inbox at the end of the period.
- Website analytics: not applicable while no analytics tools are in use. We will set a retention period if we add them.
When data is no longer needed, we delete or anonymise it.
7. How we protect your data
We use technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, or alteration. These include access controls, secure hosting over HTTPS, and limiting staff access to the data they need for their work. No system is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that affects you, we will notify you and the Office of the Data Protection Commissioner as the law requires.
8. Cookies
Our website uses cookies and similar technologies to keep the site working. You can control cookies through your browser settings. Blocking some cookies may affect how the site works.
9. Your rights
Under the Data Protection Act, 2019, you have the right to:
- be informed about how your personal data is used
- access the personal data we hold about you
- ask us to correct inaccurate or incomplete data
- ask us to delete your data in certain circumstances
- object to processing, including direct marketing
- restrict processing in certain circumstances
- withdraw consent at any time, where processing is based on consent
- data portability, where the law provides for it
- not be subject to decisions based solely on automated processing that significantly affect you
- complain to the Office of the Data Protection Commissioner
To exercise any of these rights, email info@shemeji.africa. We will respond within the time required by law. We may ask you to confirm your identity before we act on a request.
To stop marketing messages at any time, use the unsubscribe link in any email or reply STOP to any message.
10. Children
Our website and products are intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed. Where changes are significant, we will tell you by email or through the website before they take effect.
12. Registration with the Data Protection Commissioner
Agri-Sankofa Millers Limited is in the process of registering with the Office of the Data Protection Commissioner, as required under the Data Protection Act, 2019. [UPDATE WHEN REGISTRATION IS COMPLETE: replace this paragraph with the registration number and date.]
13. Contact us
For questions about this policy or how we handle personal data:
- Email: info@shemeji.africa
- Post: Agri-Sankofa Millers Limited, MURBS Building, 2nd Floor, Opposite Kiwasco, Makasembo Road, Kisumu City, Kenya
If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner, Kenya.