Data Privacy Policy
1. Introduction
Isuzu East Africa Limited (Isuzu EA) respects your privacy and we are committed to protect your personal data in accordance with the Kenyan Data Protection laws. This policy explains how we collect, process, and store any form of personal data that we access. This policy applies to all customers, dealers, Authorized Service Outlets (ASO’s), stakeholders, employees’ suppliers, and all visitors frequenting Isuzu EA’s premises. The personal data we process in relation to you and/or your company is provided by you, your representative, third parties, through our website, publicly available resources or generated during the purchase of a product or service.
When we collect and process your personal information, we ensure to keep it safe and process it in accordance with our privacy principles set out below.
2. Definitions
“You Means”
a. Customer- the person who subscribes to, uses or purchases any of our products and services or accesses our websites and includes any person who accesses any of the products and services offered by Isuzu EA.
b. Any dealer and/or ASO’s who has signed an agreement with us and is recognized as a dealer or ASO in accordance with any applicable laws or Regulations.
c. Any visitor that is a person (including contractors/subcontractors or any third parties) who gains access to any Isuzu EA premises.
d. Any supplier who has been contracted by Isuzu EA and executed a Supplier contract.
3. What Personal Data Do We Collect About You?
ISUZU EA collects, stores, and processes the following types of information about you (note that the list may not be exhaustive):
• Your personal details including your name, title, postal address, email address, telephone number, and location.
• Financial data: Your bank account details, PIN Number, Debit and Credit card Information.
• Vehicle Registration Details
• Marketing communications and subscriptions to our newsletters.
• Your images or videos.
• Demographic data: Address, Preferences, or interests.
• Your Internet Protocol address, browser type, pages you browsed, location and time zone setting, and the device you use to access our website.
• Identification documents
• We use closed circuit Television (CCTV) surveillance recordings. CCTV devices are installed at strategic locations to provide a safe and secure environment in all Isuzu EA premises.
• Job application for recruitment purposes.
• Feedback and any survey responses you give us.
• Recruitment related data: CV, education, employment history, professional membership.
4. How do we collect your personal data?
ISUZU EA collects your personal information when you do the following (note that this list is not exhaustive):
• When you apply for recruitment, we may obtain your information directly from you when you apply through the Human Resource department or indirectly from an employment agency or a background check provider. In some cases, we may collect additional information from third parties, such as former employers, credit reference agencies, and other background check agencies.
• When you purchase a product or service from us. This includes but not limited to purchase of vehicles and parts, vehicle servicing, and roadside assistance.
• When you visit our website.
• When you call us or interact with us through social media, phone, and our email.
• When you are present on ISUZU EA premises where CCTV cameras capture your image for security purposes.
• When you attend our promotion and marketing events
• When you interact with us as a supplier, merchant, dealer, or agent.
• Provide us feedback.
• Interaction with the organization’s social media platforms and emails and we could record conversations for quality purposes.
• When requesting parking, we shall collect and retain your personal information.
• We maintain a register of visitors in where we collect and keep personal information.
For data relating to a minor (any person below 18 years of age), we only process it on the basis of consent provided by the minor’s parent or guardian, or as otherwise permitted by relevant law and regulations.
5. Purposes for Which We Process Your Personal Data
We only use your personal data when the law allows us. The following are some of the purposes why we process your personal data: • To comply with any legal obligations or rights we are subject to.
• To inform you generally about our new and upcoming products and contact you with any offers and promotions that we have. We provide you with the option to unsubscribe or opt out of further communication on any electronic marketing communication sent to you or you may opt out of by contacting us.
• To facilitate effective business administration.
• To respond to and defend against legal claims.
• To register and deliver any products or services that you have bought from us.
• To help improve our website, services, and customer experience.
6. Disclosure of Information to Third Parties
We will only disclose your information to external parties in situations where legal obligations or where our contract obligations to you require us to do so. These external parties may include:
• Law enforcement agencies, tax authorities, regulatory authorities, courts, or public authorities as mandated by law.
• Fraud prevention and Anti money laundering agencies.
• Subsidiaries, associates, partners, or agents involved in delivering services to you.
• Third-party security firms for your safety.
• Government databases for identity verification.
• Survey agencies conducting surveys, research and data on our behalf.
• Debt collection agencies.
• Third parties involved in recruitment, employment administration, or legal obligations.
• Emergency service providers when necessary for your rescue, health, and safety.
• Dealers or service centers responsible for the delivery of ISUZU EA’s products and services to you.
7. Direct Marketing
You may be required to opt in or give any other form of explicit consent before receiving marketing messages from us. You can ask us to stop sending you marketing messages at any time by writing to us on marketing@isuzu.co.ke and checking or unchecking relevant boxes to adjust your marketing preferences or by following the optout links on any marketing messages sent to you. Where you opt out of receiving these marketing messages, this will not apply to marketing data provided to us as a result of a product, service already taken up, warranty registration, product or service experience or other transactions.
8. The Use of Cookies
We use cookies on our website to enhance your browsing experience and provide personalized content. These cookies help us analyze site traffic, understand user behavior, and improve our services. By continuing to use our website, you consent to the use of cookies in accordance with this policy. The type of information gathered encompasses non-personal data such as the pages you have browsed and the frequency of your visits to our site. Depending on your browser, you can prevent your browser from accepting any cookies at all, but this may affect your browsing experience and limit access to some interactive features on our website.
9. International Data Transfers
In limited cases, your data may need to be transferred outside of Kenya to fulfill our legal or contractual obligations to you. To ensure the protection of your personal data, ISUZU EA will uphold the requirements of the Data Protection Act, 2019. We shall ensure appropriate safeguard for your personal information before any transfers.
10. How Long Do We Retain Your Personal Data?
We commit to retaining your personal data only for a duration that reasonably serves the original purposes for which it was collected. However, in cases of complaints or when we anticipate potential legal action, we may retain your data for an extended period. When determining the appropriate retention period for personal data, we consider factors such as the quantity, nature, and sensitivity of the data, the potential risks associated with unauthorized access or disclosure, and the feasibility of achieving the data’s purposes through alternative means. We also consider our internal policies and legal, regulatory, tax, accounting, or other requirements. Please note that under certain circumstances, we may anonymize your personal data for research and statistical purposes, rendering it unassociated with your identity. In such cases, we may use the data indefinitely without issuing a notice to you.
11. How Do We Protect Your Personal Data?
We have in place appropriate security measures to protect your personal data and prevent it from being accidentally lost, used, or accessed in an unauthorized manner, altered, or disclosed. Our employees, agents, contractors and other third parties only access personal data strictly on a need-to-know basis. They only process the data on our instructions and are subject to a duty of confidentiality.
12. Your Legal Rights and How to Exercise Them
ISUZU EA is committed to upholding your rights under the Data Protection Act, 2019. These rights include:
• Access your personal information and details about how we process it.
• Requesting corrections to your data.
• Requesting the erasure of your personal data.
• Objecting to the processing of your data.
• Requesting restrictions on the processing of your data.
• Requesting the transfer of your data to another party.
To exercise these rights, please contact us at data.privacy@isuzu.co.ke. There is no fee required for you to access your personal data, but a nominal fee may apply to unfounded or excessive requests. In cases where your identity needs verification, we may request additional information. This is a security measure to ensure that we do not disclose personal data to a person who has no right to receive it.
13. Amendments to this Notice
ISUZU EA reserves the right to amend or modify this statement at any time to reflect changes in the law, our company, and our services. Therefore, you should periodically review this statement to see the most recent update to the Data Protection Statement.
14. Statement Effective Date
1st September 2021