Last updated: 25th July 2026

Introduction

Eastnat Limited, trading as Eastnat Foods (“Eastnat”, “we”, “us”, “our”), makes and sells natural food and wellness products across Kenya, both online at www.eastnat.co.ke and through our branches and retail partners. This policy explains how we collect, use, store, and protect the personal data of anyone who visits our Website, buys from us, or otherwise interacts with Eastnat.

We take data protection seriously and handle your information in line with Kenya’s Data Protection Act, No. 24 of 2019, and its regulations. Please take a few minutes to read this policy. If any part of it doesn’t sit right with you, we’d ask that you stop using our Website and services. Where you go on to use them anyway, that use tells us you accept the terms set out here.

Questions about how we handle your data can be sent to [email protected] at any time.

Key Terms

A few words come up often in this policy, so here’s what we mean by them:

• “You” / “your” — anyone who buys from us, browses our Website, or otherwise shares information with Eastnat, including customers and suppliers.
• “Eastnat” / “we” / “us” / “our” — Eastnat Limited and the Eastnat Foods brand.
• “Personal Data” — any detail that identifies you, directly or indirectly: your name, ID number, phone number, email, location, an online identifier, or anything specific to your physical, economic, cultural, or social identity.
• “Data Protection Law” — the Data Protection Act, No. 24 of 2019, and any regulations issued under it.
• “Third Party” — any person or organisation we authorise to process Personal Data on our behalf.

Why We’re Allowed to Process Your Data

Under Kenyan law, we can only process your Personal Data where we have a valid reason to. Ours will usually be one of the following:

• Fulfilling an order or agreement you’ve entered into with us.
• A legitimate business reason — processing your order, taking payment, recovering an unpaid debt, or understanding how customers use our products.
• A legal duty we must meet, such as tax reporting or anti-money-laundering obligations under the Proceeds of Crime and Anti-Money Laundering Act, No. 9 of 2009.
• Your explicit consent.
• The public interest — for example, health or security matters.
• Protecting your vital interests, or someone else’s, where your rights don’t override the need to act.

Where we’d like to use your data for marketing or another commercial purpose beyond what’s listed above, we’ll ask for your written consent first and explain exactly what we need and why. Agreeing is always optional — it won’t affect your ability to buy from us.

What We Collect

What we hold about you depends on how you interact with Eastnat — placing an order, joining our mailing list, messaging us on social media, or just browsing the Website.

Information you give us directly

This includes your name, delivery address, phone number, email, payment details, and any social media login details you use to interact with us. We ask that whatever you share with us is accurate and current, and we’d appreciate a heads-up if anything changes.

Information collected automatically

When you visit our Website, some technical details are captured without any action from you — your IP address, browser and device type, operating system, general location, and how you’re navigating the Site. None of this reveals who you are by name; it mainly helps us keep the Website secure, running smoothly, and helps us understand how it’s being used. Cookies play a part in this too, covered separately below.

Information from other sources

Occasionally we receive data about you from elsewhere — a public register, a marketing partner, or a social platform like Facebook or Instagram. This might include your public profile details, or leads generated through paid promotions.

Cookies

What they are

A cookie is a small piece of text a website stores on your device so it can recognise you on your next visit. They’re a normal part of how most websites work, from keeping you logged in to remembering your preferences. You can read more about cookies generally at https://allaboutcookies.org/.

How we use them

Our Website uses cookies to tell you apart from other visitors and to make browsing smoother. If your browser is set to accept cookies, ours will be issued automatically; if you’ve turned them off, some parts of the Site may not work quite as well. The cookies we set ourselves only capture anonymised data — see the next section for cookies set by others.

The types we use

Broadly, our cookies fall into two categories: functional cookies, which keep the Website working properly, and analytical cookies, which help us understand visitor patterns and interests using anonymous, aggregated data.

Managing your cookie settings

Your browser settings let you accept or block cookies, either individually or entirely. Blocking all cookies may mean some pages don’t display or work as expected. Your browser’s help menu or your device manual will show you how to clear cookies already stored.

What We Use Your Data For

We rely on your data for purposes tied to a contract with you, a legitimate business need, a legal duty, or your consent — and we’ve noted which applies next to each purpose below.

• Marketing and promotions [business purpose / consent] — sharing offers, new products, or updates by email or SMS. You can opt out any time; see “Your Rights” below.
• Administrative messages [business purpose / legal duty / contract] — order confirmations, delivery updates, or changes to our policies.
• Customer testimonials [consent] — we only publish a testimonial with your name after you’ve agreed to it. To update or remove one, email [email protected] with your name and where the testimonial appears.
• Targeted advertising [business purpose / consent] — showing you content or ads relevant to your interests or location, and measuring how well they perform.
• Competitions and giveaways [business purpose / consent] — running and administering any promotions you choose to enter.
• Requesting feedback [business purpose / consent] — checking in on your experience with our products or Website.
• Keeping our Website safe [business purpose / legal duty] — detecting and preventing fraud or misuse.
• Enforcing our policies [business purpose / legal duty / contract].
• Responding to legal requests [legal duty] — for example, if we receive a court order or similar.
• General business analysis [business purpose] — understanding trends, measuring campaigns, and improving our products and Website.

Who We Share Your Data With

We don’t sell your data, and we only share it in specific situations:

• To comply with the law — court orders, regulatory requests, or similar legal processes.
• To protect rights and safety — investigating fraud, policy violations, or threats to someone’s safety.
• With service providers who work on our behalf — payment processors, delivery partners, hosting providers, and marketing or analytics tools. They only get what they need to do their job.
• As part of a business transaction — if Eastnat is ever involved in a merger, acquisition, or sale of assets, your data may transfer as part of that deal.
• With advertising partners who help us show relevant ads based on your activity on our Site and elsewhere.
• With our affiliates and group companies, who are held to the same standards as this policy.
• With business partners, where we run joint offers or promotions together.
• With your consent, for any purpose not already listed here.

If you post publicly on our Site or social channels — a comment, a review, a photo — remember that anything you share there can be seen and shared further by other users.

Sending Data Outside Kenya

Some of the tools and platforms we use to run Eastnat’s Website and marketing (such as cloud hosting or payment processing) may store or process data outside Kenya. Where this involves sensitive Personal Data, we’ll only do so with your consent and once we’re satisfied appropriate safeguards are in place to protect it. If you’re contacting us from outside Kenya, note that your information will be processed here, and by submitting it to us, you’re agreeing to that transfer. We take reasonable steps to keep your data secure wherever it’s processed, and we’re happy to share more detail on our specific safeguards if you ask.

If Eastnat is ever acquired or merges with another company, your information may pass to the new owners as part of that transition.

Links to Other Websites

Our Website may occasionally link to third-party sites, or display ads from businesses we’re not affiliated with. Once you leave our Site, this policy no longer applies — we’d encourage you to check the privacy practices of any third party before sharing information with them, since we can’t take responsibility for how they handle your data.

How Long We Keep Your Data

We hold onto your data only for as long as it’s needed for the purpose it was collected for, or as long as the law requires — for example, tax or accounting records. Once there’s no ongoing reason for us to keep it, we’ll delete or anonymise it. Where that isn’t immediately possible (say, because it sits in a backup archive), we’ll secure it and restrict any further use of it until it can be properly deleted. We may keep data for longer where:

• You’ve consented to a longer retention period.
• The law specifically permits or requires it.
• It’s reasonably necessary for a lawful business activity.
• A contract between us requires it.

Keeping Your Data Secure

We use a mix of technical and organisational safeguards — including encryption where appropriate — to protect your Personal Data from unauthorised access, loss, or misuse. That said, no method of transmission over the internet is completely risk-free, and we can’t guarantee absolute security for data sent to or from our Website. We’d encourage you to only share personal information with us over a secure connection.

Children’s Data

Eastnat’s Website and services are intended for adults, and we don’t knowingly collect data from, or market to, anyone under 18. By using our Site, you’re confirming that you’re either 18 or older, or that you’re a parent or guardian consenting on behalf of a minor in your care. If we discover we’ve collected data from someone under 18 without appropriate consent, we’ll delete it. If you’re aware of any such data, please let us know at [email protected].

Your Rights

Under the Data Protection Act, you have a number of rights over your own Personal Data, including the right to:

• Access a copy of the data we hold about you.
• Ask us to correct or delete it.
• Restrict how we process it.
• Receive it in a portable format, where applicable.
• Object to certain kinds of processing.

Where we’re relying on your consent to process your data, you can withdraw that consent at any time — this won’t affect anything we did with your data before the withdrawal. To exercise any of these rights, reach out using the contact details below and we’ll respond in line with the law.

You can update or close your account at any time by contacting us directly. Where you ask us to delete your account, we’ll deactivate it and remove your data from our active systems, though we may retain limited information where needed to prevent fraud, resolve disputes, or meet a legal obligation.

To stop receiving marketing emails, use the unsubscribe link in any message we send, update your preferences with us directly, or contact us using the details below. You’ll still receive essential service messages relating to your orders or account even after opting out of marketing.

Changes to This Policy

We may update this policy from time to time, for instance to reflect changes in the law or in how we operate. Any update will carry a new “Last updated” date, and will take effect as soon as it’s published. Where a change is significant, we’ll do our best to let you know directly or via a notice on our Website. We’d suggest checking back here occasionally to stay up to date.

Get in Touch

Questions or concerns about this policy, or about how we handle your data, are always welcome.

Eastnat Foods

Phone: 0711 109 431

Email: [email protected]

Website: www.eastnat.co.ke