Privacy & Data Protection Policy

Effective Date: January 1, 2026

This policy outlines how Kyakabi Cargo, a brand of Kyakabi Group Limited, collects, uses, discloses, and protects personal data within our logistics, freight forwarding, and supply chain operations across East Africa.

1. Scope & Application

This Privacy Policy applies to all personal data processed by Kyakabi Cargo in the course of providing our services, including but not limited to:

  • Clients, consignors, and consignees.
  • Drivers, transport partners, and service providers.
  • Visitors to our websites (www.kyakabi.com) and physical premises.
  • Job applicants and employees (see Section 6).

It covers data collected through our digital platforms, service agreements, customs documentation, tracking systems, and all communications.

2. Logistics-Specific Data We Process

2.1 Customs & Regulatory Compliance Data

To facilitate customs clearance and meet regulatory requirements with authorities like URA (Uganda), KRA (Kenya), and TRA (Tanzania), we process:

  • ASYCUDA World Data: Bill of Entry numbers, Harmonized System (HS) codes, customs valuation data, duty & tax calculations.
  • Trader Information: Importer/Exporter Codes (TIN), business registration documents, contact details.
  • Compliance Certificates: UNBS certificates, phyto-sanitary certificates, certificates of origin, import/export licenses.
  • Financial Security Data: Bond details, bank guarantees, and tax compliance status.

2.2 Shipment & Transit Operations Data

To execute, monitor, and secure shipments across corridors (Northern & Central) and borders, we collect:

  • Consignment Details: Shipper/consignee names, addresses, contact info, cargo description, value, weight, and dimensions.
  • Tracking & Location Data: GPS coordinates, border crossing timestamps, checkpoint data, and route history.
  • Condition Monitoring: For cold chain and sensitive goods, we log temperature, humidity, and shock/vibration data.
  • Security & Incident Data: Container/truck seal numbers, driver identification & biometric verification, security escort details, and reports of delays, accidents, or theft.

2.3 Partner & Third-Party Data

We process data related to drivers, transporters, warehouse personnel, and agents necessary for service fulfillment and security vetting.

3. How We Use Your Data

  • To provide and manage logistics, freight forwarding, and customs clearing services.
  • To comply with legal and regulatory obligations across multiple jurisdictions.
  • To ensure the security and integrity of shipments in transit.
  • To communicate shipment status, delays, or requirements.
  • To optimize routes, improve service efficiency, and for internal analytics.
  • To process payments and manage billing.

4. Cross-Border Data Transfers & Sharing

4.1 Regional Data Sharing Requirements

Due to the nature of cross-border logistics, we are required to share specific data with governmental authorities under regional agreements (EAC Customs Union, Northern Corridor Agreement).

Country / Region Authority Typical Data Shared Legal / Treaty Basis
Uganda Uganda Revenue Authority (URA) Full customs declaration, supporting documents, financial data. Uganda Laws, EAC Customs Management Act.
Kenya Kenya Revenue Authority (KRA) Transit manifest, bond details, driver & vehicle information. Northern Corridor Agreement.
Tanzania Tanzania Revenue Authority (TRA) Central Corridor documents, TIN, cargo details. EAC Customs Union.
DRC / South Sudan Relevant Border & Customs Agencies Simplified transit documents, safety, and security data. Bilateral Transit Protocols.

Note: We only share the minimum data necessary to comply with these legal requirements and facilitate your shipment's movement.

5. Data Security & Retention

5.1 Our Security Measures

We implement technical and organizational measures including encryption, access controls, secure facilities, and staff training to protect data from unauthorized access, disclosure, alteration, or destruction.

5.2 Data Retention Periods

We retain personal data only as long as necessary for the purposes collected or as required by law:

  • Customs & Tax Data: Retained for a minimum of 7 years as mandated by URA and similar regional authorities.
  • Contractual & Transactional Data: Retained for the duration of the business relationship and 7 years thereafter for legal and audit purposes.
  • Tracking & Operational Data: Typically retained for 2-3 years for service improvement and dispute resolution, after which it is anonymized or deleted.

6. Careers & Job Applications

When you apply for a position at Kyakabi Cargo via our website, email, or third-party platforms, we collect:

  • Contact information, resume/CV, cover letter, and references.
  • Professional qualifications, work history, and salary expectations.
  • Details obtained during interviews or assessments.

Use of Application Data: This data is used solely for the recruitment process. Unsuccessful applicant data may be retained for up to 2 years for future opportunities, unless you request deletion. For more details, please see our specific Recruitment Privacy Notice.

7. Your Rights

Depending on applicable law, you may have rights to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Request Erasure of your data, subject to legal obligations (e.g., customs retention).
  • Object to or Restrict certain processing.
  • Data Portability where applicable.

To exercise these rights, please contact our Data Protection Officer using the details in Section 9.

8. Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we are committed to:

  • Regulatory Notification: Informing the relevant supervisory authority within 72 hours of becoming aware, as required by law.
  • Individual Notification: Informing affected data subjects without undue delay when the breach is likely to result in a high risk to their rights.
  • Immediate Action: Containing the breach, assessing its impact, and taking steps to prevent recurrence.

9. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer
Kyakabi Group Limited / Kyakabi Cargo
Email: dpo@kyakabi.com
Phone: +256 783 171 399

General Inquiries & Customer Service:
Website: cargo.kyakabi.com
Contact Page: Contact Us

We may update this policy periodically. The latest version will always be posted on our website.