Legal
Privacy Policy
Compliance with the Kenya Data Protection Act (2019) across all Bidii Brands digital platforms.
Who we are
Bidii Brands Limited, a company registered in Kenya with offices in Nairobi, is the data controller for personal data submitted through bidiibrands.com, bdii.co.ke and bd-ii.com. This page is maintained by Bidii Brands Limited.
Lawful basis and purpose
We process commercial contact data on the basis of legitimate interest and, where required, your consent. Data is used to route and respond to trade enquiries, assess partner applications, fulfil orders and meet tax and customs record-keeping obligations.
What we collect
Names, company details, work email addresses, telephone numbers, country of operation, uploaded commercial documents and enquiry content. Analytics cookies are only set after you consent.
Data retention
Commercial enquiry records are retained for seven years to satisfy Kenya Revenue Authority and customs documentation requirements. Marketing contact records are reviewed every 24 months and deleted where there is no active commercial relationship.
Your rights under the Kenya Data Protection Act (2019)
You may request access to, correction of, or deletion of your personal data, object to processing, and lodge a complaint with the Office of the Data Protection Commissioner. We respond to verified requests within 30 days.
Data Protection Officer
Contact our Data Protection Officer at dpo@bidiibrands.com for any request, complaint or query relating to personal data.
Security of uploaded documents
Documents submitted through our forms are transmitted over encrypted connections and stored in access-controlled storage. Access is restricted to the Bidii Brands Procurement Committee and relevant compliance staff.