Legal
Privacy Policy
Last updated: July 2026
This Privacy Policy explains how TruSource ("we", "us", "our") collects, uses, and protects personal data when you visit our website, contact us, or use our services. We are based in Nairobi, Kenya, and we act as the data controller for the personal data described below.
1. Information we collect
We collect only the information we need to respond to you, provide our services, and keep the website secure. This includes:
- Information you give us. When you submit a contact or demo request, we collect your name, email address, company, phone number, your area of interest, and any message you send. If you choose to send us a sample supplier file, we process the data it contains to demonstrate or provide our verification services.
- Technical information. When you visit the site we automatically receive standard technical data such as your IP address, browser type, device information, referring pages, and interactions, collected through server logs and analytics.
- Anti-abuse information. We use Google reCAPTCHA to protect our forms from spam and abuse, which collects device and usage signals subject to Google’s privacy terms.
2. How we use your information
We use personal data to:
- Respond to your enquiries and provide the demonstrations, services, and support you request.
- Operate, maintain, secure, and improve our website and services.
- Prevent fraud, spam, and abuse.
- Comply with our legal and regulatory obligations.
- Send you information you have asked for or that is relevant to a service you are using. We do not sell your personal data.
3. Legal bases for processing
Where the EU General Data Protection Regulation (GDPR) or comparable law applies, we rely on one or more of the following legal bases: your consent; our legitimate interests in operating and improving our business and securing our systems; the performance of a contract with you; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time.
5. International transfers
We operate from Kenya and work with providers located in other regions, including the European Union and the United States. As a result, your personal data may be processed outside your country of residence. Where required, we take steps to ensure your data continues to be protected by appropriate safeguards.
6. How long we keep your information
We keep personal data only for as long as necessary for the purposes described in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When it is no longer needed, we delete or anonymise it.
7. Your rights
Depending on your location, you may have the right to access the personal data we hold about you; to have it corrected or deleted; to restrict or object to its processing; to data portability; and to withdraw consent. If GDPR applies to you, you also have the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, contact us at the address below.
9. Security
We use reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
10. Children
Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children.
11. Third-party links
Our site may link to third-party websites and services that we do not control. This policy does not apply to those sites, and we encourage you to read their privacy notices.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date above. Your continued use of the site after any change indicates your acceptance of the updated policy.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, contact us at [email protected], or by post at ABC Place, Waiyaki Way, 10th Floor, Nairobi, Kenya.