Privacy Policy
Effective date: 1 September 2026
Tony & Terry Ltd, trading as Tony & Terry Couriers (“TnT”, “we”, “us” or “our”), is developing a technology-enabled courier service in Nairobi, Kenya. This policy explains how we handle personal data through our website, customer and business applications, courier application, recipient tracking experience, management web portal and related support channels.
1. Personal data we may collect
- Account and contact data: names, business names, telephone numbers, email addresses and account identifiers.
- Delivery data: pickup and delivery addresses, recipient details, delivery instructions, parcel descriptions, declared value, size, weight and tracking references.
- Courier data: identity and eligibility information, assigned routes, availability, vehicle details and location while performing an active delivery assignment.
- Custody and delivery records: QR or barcode scans, timestamps, parcel-condition and seal records, signatures, delivery codes and approved proof-of-delivery photographs.
- Payment and transaction data: delivery charges, invoices, payment status and transaction references. We do not intend to store full payment-card details.
- Support and safety data: enquiries, complaints, incident reports, call or message records and information needed to investigate missing, damaged or disputed parcels.
- Technical data: IP address, device and browser information, application logs, cookies, security events and usage information.
2. How we obtain personal data
We may receive data directly from customers, businesses, couriers and recipients; from devices used with our applications; from delivery and payment partners; or from another person arranging a delivery. Businesses and senders must ensure they are permitted to provide recipient information for delivery purposes.
3. Why we use personal data
- To create accounts, receive bookings and provide delivery estimates.
- To collect, route, track, hand over and deliver parcels.
- To notify senders, businesses and recipients about delivery status.
- To verify recipients and create proof-of-delivery and chain-of-custody records.
- To manage couriers, routes, service levels, payments and customer support.
- To prevent fraud, prohibited-item movement, theft, misuse and security incidents.
- To improve our applications, operations and customer experience.
- To comply with legal, regulatory, tax, insurance and lawful authority requirements.
- To send marketing communications where consent or another lawful basis applies. Recipients may opt out.
4. Legal grounds
We process personal data only where permitted by applicable Kenyan law, including when processing is necessary to perform a delivery contract, comply with a legal obligation, protect vital interests, pursue a legitimate business purpose that does not override individual rights, or where valid consent has been given.
5. Who may receive personal data
We disclose only the data reasonably needed for a particular purpose. Recipients may include authorised TnT staff and couriers; the sender, business customer or parcel recipient; technology, hosting, communications, mapping, identity, payment and support providers; insurers and professional advisers; and regulators, courts, law-enforcement bodies or other authorities where disclosure is legally required.
We do not sell personal data.
6. Location and tracking
The courier application may process location information during active work to support assignment, routing, safety, status updates and delivery verification. Customer and recipient interfaces may show appropriate delivery progress without exposing unnecessary courier or customer information.
7. Retention
We retain personal data only for as long as reasonably necessary for delivery operations, customer service, dispute resolution, fraud prevention, audit, tax, insurance and legal obligations. Retention periods may differ by record type. Data that is no longer required will be deleted, anonymised or securely archived where the law permits.
8. Security
We plan and apply reasonable technical and organisational safeguards, including role-based access, authentication, encrypted communications, audit logs, controlled administrative actions, secure backups and incident-management procedures. No electronic system is completely secure, and users should protect their account credentials and delivery codes.
9. International transfers
Some technology providers may process or store data outside Kenya. Where this occurs, we will use appropriate safeguards and follow applicable requirements for cross-border transfers.
10. Your data-protection rights
Subject to applicable law, you may ask us to confirm whether we hold your data, access it, correct inaccurate information, object to or restrict certain processing, request deletion where appropriate, obtain data in a portable form where applicable, or withdraw consent without affecting earlier lawful processing. You may also raise a complaint with Kenya’s Office of the Data Protection Commissioner.
To make a request, email info@tonyandterry.com. We may need to verify your identity before acting on the request.
11. Cookies and website analytics
Our website may use essential cookies for security and functionality. Optional analytics or marketing cookies will be controlled through the available consent settings. You can change cookie choices through the website’s cookie controls or your browser settings.
12. Children
Our services are intended for businesses and adults arranging legitimate deliveries. We do not knowingly offer accounts directly to children. If we learn that a child’s data was collected without appropriate authority, we will take suitable steps.
13. Changes to this policy
We may update this policy as the platform, pilot and legal requirements develop. The latest version will be posted on this page with a revised effective date.
14. Contact us
Tony & Terry Ltd
Tony & Terry Couriers
Nairobi, Kenya
Email: info@tonyandterry.com