Privacy Policy

Tarmal Steel Limited ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us. By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not access or use our services.

We may collect the following types of information: Personal Information: • Name and contact details (email address, phone number, physical address) • Company name and business information • Payment and billing information • Delivery addresses and preferences Automatically Collected Information: • IP address and device information • Browser type and version • Pages visited and time spent on our website • Referring website addresses • Location data (with your consent) Information from Third Parties: • Business information from public sources • Credit information from credit reference agencies (for credit applications)

We use your information for the following purposes: Service Delivery: • Processing and fulfilling orders • Providing customer support • Managing deliveries and logistics • Generating quotations and invoices Communication: • Responding to inquiries and requests • Sending order confirmations and updates • Providing product information and updates • Marketing communications (with your consent) Business Operations: • Improving our products and services • Analyzing website usage and performance • Preventing fraud and ensuring security • Complying with legal obligations

We may share your information with: Service Providers: • Delivery and logistics partners • Payment processors • IT and hosting providers • Marketing and analytics services Business Partners: • Authorized distributors and dealers • Suppliers and manufacturers (when necessary) Legal Requirements: • When required by law or legal process • To protect our rights and property • To prevent fraud or illegal activities • In connection with business transactions (mergers, acquisitions) We do not sell your personal information to third parties for their marketing purposes.

We implement appropriate security measures to protect your information: Technical Measures: • Secure Socket Layer (SSL) encryption for data transmission • Firewalls and intrusion detection systems • Regular security assessments and updates • Access controls and authentication Organizational Measures: • Staff training on data protection • Confidentiality agreements • Limited access to personal information • Regular review of security practices While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

We retain your personal information for as long as necessary to: • Fulfill the purposes for which it was collected • Comply with legal obligations • Resolve disputes and enforce agreements • Meet business requirements After the retention period, we securely delete or anonymize your information. Transaction records may be retained for up to 7 years for tax and accounting purposes.

Under applicable data protection laws, you have the following rights: • Access: Request a copy of your personal information • Correction: Request correction of inaccurate information • Deletion: Request deletion of your information (subject to legal requirements) • Restriction: Request limitation of processing • Objection: Object to processing for marketing purposes • Portability: Request transfer of your data to another service • Withdrawal: Withdraw consent for processing To exercise these rights, please contact us using the information provided below.

Our website uses cookies and similar technologies: Types of Cookies: • Essential cookies: Required for website functionality • Analytics cookies: Help us understand website usage • Marketing cookies: Used for targeted advertising (with consent) Managing Cookies: • You can control cookies through your browser settings • Disabling cookies may affect website functionality • We honor "Do Not Track" browser settings Third-Party Analytics: • We use Google Analytics to understand website traffic • Analytics data is anonymized and aggregated

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

Your information may be transferred to and processed in countries other than Kenya. We ensure appropriate safeguards are in place for such transfers, including: • Standard contractual clauses • Adequacy decisions • Other lawful transfer mechanisms By using our services, you consent to the transfer of your information to countries that may have different data protection laws.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. For significant changes, we will notify you through: • Email notification (if we have your email) • Prominent notice on our website • Other appropriate means

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Tarmal Steel Limited Data Protection Officer Email: [email protected] General Inquiries: [email protected] Phone: +254 110 333 555 Head Office: Mombasa, Kenya You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya if you believe your rights have been violated. Last Updated: January 2025