Privacy Policy

Compliant with the Kenya Data Protection Act (2019)

Costellas Ltd is committed to protecting the confidentiality, integrity, and security of your business and personal data. We act as a Data Controller in accordance with the Kenya Data Protection Act (2019) and applicable regulations issued by the Office of the Data Protection Commissioner (ODPC).

Data Collection: We collect information necessary for commercial trade and regulatory compliance, including your business name, KRA PIN (for tax invoicing purposes), delivery address, and authorized contact person details.
Purpose of Processing: Personal and business data collected is used strictly for order processing and fulfillment, statutory tax compliance (including i-Tax reporting), invoicing, and providing shipment and delivery updates.
Third-Party Disclosure: We may share your data only with legally mandated or operational third parties, including the Kenya Revenue Authority (KRA), licensed clearing and forwarding agents, and shipping lines, solely for the purposes of regulatory compliance, customs clearance, and logistics execution. We do not sell, rent, or trade your data to unauthorized third parties.
Data Security: Costellas Ltd implements industry-standard administrative, technical, and physical safeguards, including encryption and controlled access measures, to protect transaction records and sensitive business information against unauthorized access, loss, or misuse.
Access &