Privacy policy

Avex Petroleum Ltd (“Avex”, “we”) operates avexpetroleum.com. We are the data controller for personal data collected through this website and our client portal. Questions about this policy or your data go to info@avexpetroleum.com.

We only collect what you give us, plus the minimum needed to run and protect the site:

• Quote requests: your name, email, phone and company (if given), delivery location, the date you need supply, the products, quantities and delivery methods you choose, and any notes.
• Client accounts: your name, email and a securely hashed password (we never store or see the password itself), your company’s name, sector, country and phone, and the quotes and orders linked to it.
• Team invitations: the email address and optional name of a colleague you invite.
• Enquiries: what you enter in the contact form. These are emailed to our team and not stored in our database.
• Security data: your IP address and, for sign-in attempts, the email entered, held briefly in counters that limit repeated attempts. They expire within a day.

• To price, confirm and deliver what you request, and to send quotes and order updates.
• To create and secure your client account, including password resets and verifying your company.
• To reply to enquiries.
• To protect the site from abuse, such as repeated failed sign-ins or spam.
• To meet our legal, tax and record-keeping obligations.

We process this data to take steps you ask for before a contract and to perform it, to meet legal obligations, and for our legitimate interest in running a secure business. We do not sell personal data or use it for advertising.

We use a small number of service providers who process data on our behalf:

• Vercel hosts the website and serves its pages.
• Neon hosts the database that stores quotes, orders and client accounts.
• Resend delivers the emails we send you.
• TradingView provides the market price strip at the top of the site. It loads from TradingView’s servers, which receive your IP address and may set their own cookies.

Some of these providers process data outside Kenya. Where they do, we rely on safeguards permitted under the Data Protection Act, 2019. We may also disclose data where the law requires it.

We use only the cookies needed to keep you signed in to the client portal and to protect sign-in forms. We do not use advertising or tracking cookies. Our visitor statistics are collected without cookies. The TradingView price strip may set its own cookies.

We keep account, quote and order records while your account is active and afterwards for as long as we need them for legal, tax and accounting purposes. Password reset links expire after an hour and invitations after seven days. Security counters expire within a day.

Under the Data Protection Act, 2019 you have the right to:

• be told how your data is used, and get a copy of it;
• have inaccurate data corrected, or data deleted where we no longer need it;
• object to processing, or ask us to restrict it;
• receive your data in a portable format.

Email info@avexpetroleum.com to use any of these rights. You can also complain to the Office of the Data Protection Commissioner (ODPC).

Data travels over encrypted connections. Passwords are stored only as salted hashes, reset and invitation links are single-use and stored only in hashed form, and each client company can see only its own quotes and orders.

We will update this page when our practices change and show the date of the latest version at the top. See also our terms of use.