How Crostar Energy handles personal data.

1. Who we are

Crostar Energy LTD is a company registered in Kenya under registration number PVT-MKU926M6. Our primary site is Crostar Energy Hub, Mavueni, Kilifi County, Kenya. For website privacy questions, contact info@crostarenergy.co.ke.

2. Scope

This policy applies to visitors to crostarenergy.co.ke and people who contact us through the website, email or linked social channels. It is designed with reference to Kenya’s Data Protection Act, 2019 and, where applicable to people in the European Economic Area, the General Data Protection Regulation.

3. Information we collect

• Contact and enquiry data: name, email, organisation, phone number, enquiry type, message and related correspondence.
• Technical data: IP address, browser, device, referral URL, pages visited, timestamps and consent choices.
• Analytics and advertising data: only as controlled by your consent choices and Google Consent Mode.
• Map interaction data: Google may receive device and usage information only after you choose to load the interactive map.

4. Purposes and legal bases

5. Cookies and consent

Google Consent Mode v2 is configured with analytics and advertising storage denied by default until a choice is recorded. You may accept all, reject non-essential technologies or customise analytics and advertising choices. You can reopen Cookie Settings from the footer. See our Cookie Policy.

6. Sharing

We may share information with authorised Crostar personnel, Forest Energy B.V., service providers supporting hosting, email, security, analytics or professional advice, and public authorities where legally required. We do not sell personal data.

7. International transfers

Some service providers, including Google, may process data outside Kenya or the EEA. Where required, transfers are supported by consent, contractual safeguards, adequacy decisions or another lawful mechanism. Rejecting non-essential technologies reduces analytics and advertising processing.

8. Retention

Website enquiries are retained only as long as reasonably necessary to respond, manage a relationship, meet legal or financial obligations, resolve disputes and protect legitimate interests. Routine unsuccessful enquiries are generally reviewed for deletion or anonymisation within 24 months. Security logs may be kept for shorter periods unless an incident requires longer retention.

9. Your rights

Depending on applicable law, you may have rights to be informed, access personal data, correct inaccurate data, object to or restrict processing, request deletion, receive portable data, withdraw consent and complain to a supervisory authority. In Kenya, complaints may be directed to the Office of the Data Protection Commissioner. EEA residents may also contact the supervisory authority in their country.

To exercise a right, email info@crostarenergy.co.ke. We may request information needed to verify identity.

10. Security

We use reasonable organisational and technical safeguards, including access controls, secure hosting configuration, validation, anti-spam controls and limited data collection. No internet transmission or storage system can be guaranteed completely secure.

11. Children

This website is directed to business, institutional and adult stakeholders. It is not designed to knowingly collect personal data from children.

12. External services and links

Social networks, Google Maps and other external websites operate under their own terms and privacy policies. Opening an external service may allow that provider to collect information.

13. Changes

We may update this policy to reflect legal, technical or operational changes. The effective date at the top identifies the current version.

14. Contact

Crostar Energy LTD
Crostar Energy Hub, Mavueni, Kilifi County, Kenya
info@crostarenergy.co.ke