1. Who we are
This site is operated by Kanda Logistics Advisory Ltd (“Kanda”, “we”, “us”), a logistics advisory practice based in 2nd Avenue, Cargo Terminal, JKIA, Nairobi. For the purposes of the Data Protection Act, 2019 (Kenya) we are the data controller for the limited personal data described below.
- Registered entity: Kanda Logistics Advisory Ltd — incorporation in progress; registration number to follow
- Registered address: 2nd Avenue, Cargo Terminal, Jomo Kenyatta International Airport, Nairobi, Kenya
- Email: hello@kanda.africa
We have not appointed a Data Protection Officer. Given that the tools process no personal data on our infrastructure, we do not currently meet the threshold at which one is required, and data-protection queries are handled directly at the address above. We keep that position under review as the practice grows.
2. How the tools handle your data
Kanda is a static application. Once the page has loaded, it makes no network requests at all. That is not a policy we ask you to trust — it is enforced by a Content Security Policy served with the site, which blocks requests to every origin other than our own. You can verify it yourself: open your browser's network inspector, complete a diagnostic, and observe that nothing is sent.
The practical consequence runs both ways, and it is only fair to state the second half. Because we hold nothing, we can offer no account recovery, no sync between your phone and your laptop, and no restoration if you clear your browser data or lose the device. Export anything you would be sorry to lose.
3. What we actually receive
Only what you send us. If you email us, we receive your address, your name if you give it, and whatever you write. We use it to answer you and for no other purpose. We do not operate a mailing list, we run no analytics, we set no cookies, and we embed no third-party scripts, pixels or fonts.
4. Storage on your device
The application uses two browser storage mechanisms, both local to your device:
- Local storage — small preferences such as your selected brand and your progress through a checklist.
- IndexedDB — completed scorecards, calculations and barrier reports, so you can return to them.
Both are visible to you and erasable by you at any time under , or by clearing site data in your browser settings. Neither is readable by us.
5. Processors and third parties
We engage no data processors, because there is no data to process. The site is served as static files by a hosting provider, which will see standard web-server request logs — your IP address, the time of the request and the file requested — in the same way any website's host does. Those logs are the host's, are not linked to anything you type, and are not accessible to us in a form that identifies you.
6. International transfers
No personal data you enter leaves your device, so no transfer occurs. Static files may be served from a content delivery network with points of presence outside Kenya; that affects only the delivery of the application itself, never your inputs.
7. Retention and deletion
Data on your device is retained until you delete it — we set no expiry, because we cannot reach it. Email correspondence is retained for as long as needed to deal with the matter and for a reasonable period afterwards for our own records.
8. Your rights
Under the Data Protection Act, 2019 (Kenya) you have rights of access, correction, erasure, objection, restriction and portability over personal data a controller holds about you.
For anything you have entered into the tools, those rights are already in your hands and require no request to us: view it, export it as JSON, or erase it, all from . For email correspondence, write to hello@kanda.africa and we will respond within the statutory period.
9. Complaints
If you are not satisfied with how we have handled a data-protection matter, you may complain to the Office of the Data Protection Commissioner (ODPC), the supervisory authority for data protection in Kenya. We would rather hear from you first, but that route is yours regardless.
10. Children
These are professional tools for commercial operators. They are not directed at children and we do not knowingly process children's data.
11. Security
The site is served over HTTPS with a restrictive Content Security Policy, strict referrer policy and content-type protections. The strongest security control here, though, is architectural rather than configurational: a system that never receives your data cannot leak it. What remains is your device — if it is shared, treat anything saved here as visible to whoever else uses it.
12. Changes
We will update this notice when the product changes. If we ever introduce a feature that transmits data — the opt-in benchmark contribution described in our roadmap is the only one contemplated — it will be explicitly opt-in, described here before it ships, and it will never transmit anything that identifies you or your customers.
13. Contact
hello@kanda.africa · 2nd Avenue, Cargo Terminal, JKIA, Nairobi