EATLEast Africa Terminals Limited

Legal

Privacy Policy

Last updated: 1 June 2026

1. Who we are

East Africa Terminals Limited ("EATL", "we", "us") operates the bulk liquid storage facility at Shimanzi, Mombasa, and runs this website and client portal. We are the data controller for personal data processed through these services.

2. What we collect

  • Account details: name, work email, phone, company name, KRA PIN.
  • Authentication events: timestamps of sign-in attempts and approvals.
  • Operational records: tank readings, deliveries, dispatches, invoices and payments linked to your company.
  • Support and enquiries you submit via the contact form.

3. Why we process it

To deliver storage and throughput services contracted with your company, manage billing, comply with KRA / KEBS / NEMA and customs-bond obligations, and protect the portal against abuse.

4. Legal basis (Kenya DPA 2019)

We rely on contract performance, legal obligation, and our legitimate interest in operating a secure terminal. For non-essential communications we rely on consent, which you can withdraw at any time.

5. Sharing

We share data only with: regulators when required by law, our auditors under confidentiality, and infrastructure providers that host this portal under data-processing terms. We do not sell personal data.

6. Retention

Account and transaction records: 7 years after relationship ends (tax/audit requirement). Authentication audit logs: 24 months. Contact-form messages: 12 months after resolution.

7. Security

Data is encrypted in transit (TLS) and at rest. Access to the client portal is passwordless email-OTP with row-level security so each company only sees its own records. Admin actions are audit-logged.

8. Your rights

You may request access, correction, deletion or export of your personal data, and object to processing. Contact dpo@eatl.co.ke. You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

9. Cookies

We use only strictly necessary cookies for sign-in sessions and a bot-protection challenge (Cloudflare Turnstile). No advertising or cross-site tracking cookies are set.

10. Changes

We will post any material changes on this page and notify portal account holders by email.