Privacy policy

How we collect, use and protect your personal information, and the rights you have over it.

Last updated: August 19, 2026

Coronet Treasure Limited ("Coronet", "we", "us") respects your privacy and is committed to protecting your personal data. This policy explains what we collect through this website, why we collect it, how we use it, and the rights you have over it. It is written to align with the Kenya Data Protection Act, 2019, the EU/UK General Data Protection Regulation (GDPR) where applicable to overseas visitors, and international good practice.

01Who we are

Coronet Treasure Limited is a coffee trading company registered in Kenya and licensed by the Agriculture and Food Authority. For the purposes of data protection law, we are the data controller of personal data collected through this website. You can reach us at [email protected], by phone on +254 101 090 909, or by post at Harrison House, 3rd Ngong Avenue, Upper Hill, Nairobi, Kenya (P.O. Box 3122-00621).

02What we collect

We deliberately keep data collection to a minimum. Depending on how you use the site, we may process:

  • Contact and enquiry details — your name, company, email address, phone number, country, and the contents of your message when you use our contact or quote forms, message us on WhatsApp, email us, or call us.
  • Newsletter details — your email address if you subscribe to our updates.
  • Technical data — basic technical information handled by your browser and our hosting provider when serving pages (such as IP address and browser type, kept in ordinary server logs).
  • Preference data — a small record stored in your browser noting your cookie choice, so we do not ask you repeatedly.
How our forms work: when you submit the contact, quote or newsletter form, the details you enter are sent by email to our trade desk through Web3Forms, a form-delivery service that acts as our data processor. Web3Forms relays the message to our inbox and does not use it for its own purposes; its own privacy policy also applies. If you choose to follow up on WhatsApp, that message is handled by WhatsApp/Meta.

03Why we use your data, and our legal bases

  • Responding to enquiries and preparing quotes — because taking steps at your request before entering a contract requires it (contractual necessity).
  • Performing and administering trade agreements — including logistics, documentation and payment (contractual necessity; legal obligation for export and tax records).
  • Sending newsletters and trade updates — only with your consent, which you may withdraw at any time using the unsubscribe option or by contacting us.
  • Keeping the site secure and functioning — our legitimate interest in operating a safe, reliable website.

04Sharing your data

We do not sell or rent personal data. We share it only with: service providers who help us run our business (such as hosting, email and communication providers, including Web3Forms, which delivers our website form submissions by email, and WhatsApp/Meta when you contact us there, whose own privacy policies also apply); professional advisers; logistics, banking and regulatory parties where necessary to complete a trade; and public authorities where the law requires it. Where data leaves Kenya or the EEA/UK, we take reasonable steps to ensure an adequate level of protection.

05Retention

We keep personal data only as long as needed for the purpose it was collected: enquiry correspondence is generally kept for up to two years after our last exchange; contractual and export records are kept for the periods required by Kenyan tax and trade law; newsletter details are kept until you unsubscribe.

06Your rights

Subject to law, you have the right to: be informed about how your data is used; access a copy of your data; have inaccurate data corrected; have data deleted; object to or restrict processing; data portability; and withdraw consent at any time where processing is based on consent. To exercise any right, contact us at [email protected]. We will respond within the timelines set by applicable law. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke) or your local supervisory authority.

07Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we work to protect your information in line with good industry practice.

08Children

This website is intended for business audiences and is not directed at children under 18. We do not knowingly collect personal data from children.

09Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows the current version. Material changes will be highlighted on this page.

10Contact

Questions about this policy or our data practices: [email protected] · +254 101 090 909 · Harrison House, 3rd Ngong Avenue, Upper Hill, Nairobi, Kenya (P.O. Box 3122-00621).

Message our trade desk