Privacy policy / Datenschutz

Sections below written out in full are a reasoned starting position, marked (drafted default — confirm before publishing) where no business decision is on record yet. Items marked [owner confirmation required] are left open because they depend on choices not yet made (which host, what retention period) — guessing at those would describe a processing activity that may not match reality.

The short version (current site)

This website is a static site. It sets no cookies, runs no analytics and uses no tracking. Enquiry forms open your own email app — nothing you type is sent to or stored on our servers. Fonts and images are served from this website itself, not from third-party services. We do not use automated decision-making or profiling anywhere on this site.

Controller

Lamin Jawneh (German business registration under Lamin Jawneh), Kairaba Production, Mozartstraße 13, 87727 Babenhausen, Deutschland — for the German/European side of this website. Whether Kairaba Production Limited (The Gambia) acts as joint controller is subject to final legal review before launch.

No Data Protection Officer has been appointed, as the scale of processing currently falls below the threshold that would require one under Art. 37 GDPR / § 38 BDSG (drafted default — confirm this assessment before publishing). For any data protection question, contact kairabaproduction@gmail.com.

What we collect, why, and on what legal basis

Enquiries by email or WhatsApp. If you contact us, we receive the data you send — your email address or phone number, and your message content — and use it only to answer your enquiry and, where it leads to one, to negotiate and perform a contract with you. The legal basis is Art. 6(1)(b) GDPR (steps necessary for a contract, including at your request before one is concluded), or Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries that do not lead to a contract).

Website hosting. Delivering this website necessarily involves the hosting provider processing technical access data (IP address, time, requested page, browser type) to serve pages to your device. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating a functioning, secure website).

Hosting

[owner confirmation required] — when deployed (planned: Vercel, with DNS by Cloudflare), the host processes the technical access data described above to deliver the site. The provider name(s) and a link to their privacy policy/policies must be added here once hosting is finalised; they cannot be stated accurately before that.

WhatsApp and international transfers

WhatsApp is a service of WhatsApp Ireland Ltd., part of Meta. Messages you send us over WhatsApp are processed under WhatsApp's own privacy policy and terms, not ours. Meta states that data may be transferred to, and processed in, the United States and other countries outside the EEA, and that it relies on safeguards such as the EU–US Data Privacy Framework and/or standard contractual clauses for such transfers (drafted default — Meta's exact current transfer mechanism should be re-checked and cited accurately with legal counsel before publishing, since this area of law has changed before and may change again). If you would rather not have your message handled this way, please contact us by email instead.

How long we keep your data

[owner confirmation required] — no retention schedule has been decided yet for enquiry messages, quotes or order records. Until one is set, we keep enquiry and order-related messages only for as long as needed to handle your enquiry, fulfil any resulting contract, and meet applicable commercial record-keeping and tax obligations, and delete or anonymise them afterwards. A specific retention period per data type should be added here once decided.

Children

This website and its products are directed at adults making retail, wholesale or export purchasing decisions, not at children. We do not knowingly collect personal data from children (drafted default — confirm before publishing).

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. You also have the right to lodge a complaint with a supervisory authority — for the German/European side of this website, this would ordinarily be the data protection authority responsible for Hesse, Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI) (drafted default — confirm the correct current authority with legal counsel before publishing), or the authority in your own EU/UK country of residence. To exercise any of these rights, or for any privacy question, contact: kairabaproduction@gmail.com.

Changes to this policy

We may update this policy as the website, hosting, or how we handle enquiries changes. The date of the most recent substantive change will be noted here once the page leaves draft status (drafted default — confirm before publishing).

Before launch: if analytics (e.g. Cloudflare Web Analytics), a form service (e.g. Web3Forms/Formspree) or an online shop is added, this policy and the cookie notice must be extended accordingly, including naming any new processor, its legal basis, and whether a cookie consent banner becomes necessary.