ADL uses the details you send to answer your request

ADL is the data controller: the company that decides why and how your personal data is used. ADL is a clearing, forwarding and transport company in Nairobi, Kenya, incorporated in 2012.

• Office: Repen Complex, Mombasa Road, fourth floor, Office C411, Nairobi, Kenya
• Postal address: P.O. Box 2472-00200, Nairobi, Kenya
• Email: info@accordke.co.ke
• Phone: +254 734 330 860 or +254 727 563 881
• Privacy requests: info@accordke.co.ke
• Registration with Kenya's Office of the Data Protection Commissioner (ODPC): Placeholder: ODPC certificate number and expiry, or remove this line if ADL chooses not to show it, Q-55
• Representative in the European Union: Placeholder: EU representative's name and contact, if ADL appoints one, Q-59

This website collects personal data. This section lists all of it.

The quote form. The service you need, the cargo type, its approximate weight or volume, where it comes from, where it goes and when. Then who the quote is for (a company or yourself), your name, your email, your phone number and, only for a company, the company name.

The contact form. What your message is about, whether you write for a company or for yourself, your name, email, phone number, company name (optional) and your message. Please leave ID numbers and other personal details out of the message unless your enquiry needs them.

Technical data. Cloudflare, which hosts the site, sees your IP address and browser details on every page as it delivers it. On the page with the forms, Cloudflare's security check also reads signals from your browser to tell people from automated spam.

Only if you say yes. Analytics records which pages and tools you used, after you accept analytics. The map sends your IP address to the map provider when you press "Show the map". The quote form keeps your cargo answers in your own browser when you switch on "Remember my answers on this device", and sends nothing until you send the request.

• To prepare a quote or answer a message you sent for yourself, or about a shipment ADL handles for you

  Basis under the EU GDPR

  Steps you asked for before a contract, or the contract itself: Article 6(1)(b)

  Basis under Kenya's Data Protection Act 2019

  Section 30(1)(b)(i)

• To answer a quote request or message you sent on behalf of a company

  Basis under the EU GDPR

  ADL's legitimate interest in answering business enquiries: Article 6(1)(f)

  Basis under Kenya's Data Protection Act 2019

  Section 30(1)(b)(vii)

• To keep the forms free of spam and the site secure

  Basis under the EU GDPR

  ADL's legitimate interest in a secure site: Article 6(1)(f)

  Basis under Kenya's Data Protection Act 2019

  Section 30(1)(b)(vii)

• Analytics, the map and saved quote answers

  Basis under the EU GDPR

  Your consent: Article 6(1)(a), with the EU ePrivacy rules for anything stored on or read from your device

  Basis under Kenya's Data Protection Act 2019

  Section 30(1)(a)

Most quote requests come from people asking for their employer. The contract would then be with the company, not with you, so ADL relies on its legitimate interest in answering business enquiries. You have the right to object to that use at any time. Tell ADL, and it will stop unless it has a compelling reason that outweighs your interests or needs the data for a legal claim.

Where ADL relies on your consent, you can withdraw it as easily as you gave it: through "Cookie settings" at the foot of every page, or by switching off the quote memory. Withdrawing does not undo what happened before.

ADL does not use your details for automated decisions or profiling. It does not send marketing emails to people who use these forms. Placeholder: ADL confirms it sends no marketing email, Q-66

You do not have to give ADL any details. The quote form asks for your name, email and phone number because ADL replies by email or phone, so without them ADL cannot prepare or send a quote. The contact form asks for the same three for the same reason.

Leave the company name blank on the contact form if you like. Nothing else changes.

The ADL staff who answer quotes and messages read what you send. ADL does not sell your details. Each provider below works under a data processing agreement accepted in ADL's name.

• Cloudflare, Inc. (United States). Hosts the site, runs the forms and runs the security check (Turnstile). It handles your IP address and browser signals, and holds form contents in memory only while they are sent. Cloudflare also uses the security check's signals, as its own controller, to improve its bot detection.
• Resend (United States). Sends your request to ADL's inbox and a copy to you. It handles the contents of the form and your email address.
• Placeholder: ADL's mailbox provider and the location of its servers, Q-58. Holds the emails ADL receives, so it holds everything you send.
• Placeholder: analytics tool, its role and data location, chosen at architecture. Counts page visits and tool use, only after you accept analytics, with no names, emails or other identifiers.
• Sanity (Sanity US Inc. or Sanity AS, Norway). Holds the website's content. It holds the names, titles and photos of ADL team members shown on the site, and never any visitor's data.

When you press "Show the map", Placeholder: map provider, Q-40 receives your IP address and may set its own cookies. It acts under its own privacy terms, not ADL's.

Cloudflare runs at the data centre nearest you, on a global network. Resend's service providers are in the United States, even with sending set to its EU region. Sanity stores content on Google Cloud in Belgium and the United States. Using them moves personal data out of Kenya and, for visitors in the EU, out of the EU.

For the EU: Cloudflare and Resend are certified under the EU-US Data Privacy Framework, with Standard Contractual Clauses as the fallback. Placeholder: confirm Resend's active listing on dataprivacyframework.gov, with the date checked Sanity uses Standard Contractual Clauses.

For Kenya: sections 48 to 50 of the Data Protection Act 2019 govern transfers abroad. ADL relies on Placeholder: Kenyan transfer ground under section 48, chosen with ADL's adviser, keeps a record of each transfer as the Data Protection (General) Regulations 2021 require and notifies the ODPC where the law requires it.

You can ask ADL for a copy of the safeguard that covers your data.

• The website and its form service: nothing. Your request passes through memory while it is sent and is never stored or logged.
• Resend: sent emails and their logs for 30 days, then deleted.
• ADL's inbox, quote requests where no job follows: Placeholder: ADL retention period, Q-57
• ADL's inbox, contact messages: Placeholder: ADL retention period, Q-57
• Requests that lead to a job: the emails join the shipment file, kept for Placeholder: shipment record period and the rule that sets it, Q-57
• Analytics: totals only, kept for Placeholder: analytics retention period, set by ADL
• Saved quote answers: in your own browser until you clear them, switch the memory off or Placeholder: expiry set at architecture passes

• Every page loads over HTTPS, and HSTS tells browsers never to fall back to an unencrypted connection.
• Security headers limit what can run on each page.
• Cloudflare's security check stops automated submissions.
• The site has no database, so there is no store of requests to steal.
• Accounts are in ADL's name, each person has only the access their work needs and access keys sit only in the hosting and code accounts.
• The forms ask only for what a quote or a reply needs.

One weak point remains, and it is email. Once your request reaches ADL's inbox, it is as safe as that mailbox. If a breach puts your details at real risk, ADL must report it within 72 hours: to the ODPC under section 43 of Kenya's Data Protection Act 2019, and to the EU data protection authority concerned under Article 33 of the GDPR. ADL must also tell the people affected.

You have the right to:

• access: get a copy of the personal data ADL holds about you
• correction: have wrong or incomplete data put right
• erasure: have your data deleted
• restriction: have ADL keep your data but stop using it while a question is settled
• objection: stop a use based on ADL's legitimate interests, as described above
• portability: receive the data you gave in a common file format, where the basis is a contract or your consent
• withdrawal of consent: change your mind about analytics, the map or saved answers at any time

Email ADL and say which right you are using. ADL may ask you to confirm who you are, for example by replying from the email address you used in the form.

Kenya's Data Protection (General) Regulations 2021 set the clocks: 7 days for access, 14 days for correction, erasure or objection and 30 days for portability. The GDPR allows one month, which can be extended by two more for complex requests if ADL explains why within the first month. ADL works to the shorter Kenyan times for every request. Placeholder: ADL confirms it can answer within the Kenyan times

In Kenya, complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke. In the EU, complain to the data protection authority of the country where you live, where you work or where the problem happened. You can raise it with ADL first, but you do not have to.

The cookie policy lists everything the site stores on your device and why. Change your choice at any time through "Cookie settings" at the foot of every page.

The site has no careers form and takes no CVs: applications go by email straight to ADL's own mailbox, outside the website.

ADL updates this notice when the site, its providers or the law change, and shows the new date at the top.

Last checked: 12 October 2026