Privacy notice

Branded Restaurants & Retail Africa Ltd is the data controller for this website. Our registered office is 3 Maalim Juma Court, Maalim Juma Road, Kilimani, P.O. Box 14071-00100, Nairobi, Kenya. You can reach us at leonard.mudachi@brral.ke.

Only what you type into one of our forms: your name and email address, and — depending on the form — your organisation, phone number, business name, sector, and whatever you choose to write in the message field.

That is all. This site sets no cookies at all, uses no advertising or cross-site trackers, and currently runs no analytics of any kind. If we add traffic measurement later it will be cookieless and will not identify you, and we will say so here before it goes live.

To reply to you. That is the only purpose. We do not sell it, rent it, or use it for marketing you did not ask for.

The website itself stores nothing. A form submission is validated, emailed to us, and discarded — it is never written to a database. What remains is the email in our inbox, which we keep for as long as the conversation is live and then delete.

Two processors, and no one else. Cloudflare, Inc. hosts this site and handles the request. Resend delivers the email to us. Neither uses your information for their own purposes, and we do not share it with anybody else.

Both of those providers are based in the United States, so submitting a form means your name, email address and message are transferred outside Kenya in order to reach us.

Sections 48 and 49 of the Data Protection Act No. 24 of 2019 permit that transfer where it is necessary to perform a contract or to take steps at your request before entering one — which is what replying to your enquiry is — and where appropriate safeguards are in place. Both providers are contractually bound to process the data only on our instructions.

If you would rather your information did not leave Kenya, email or telephone us directly using the details on our contact page instead of using a form.

Under the Data Protection Act No. 24 of 2019 you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to how we are using it.

Email leonard.mudachi@brral.ke and we will respond. If you are not satisfied with our answer, you have the right to complain to the Office of the Data Protection Commissioner.

The site is served over TLS. Form submissions are validated on our server as well as in your browser, and are checked for automated abuse. We publish a vulnerability disclosure policy and act on reports.