Your information

Privacy

When you contact MCTO, we use the information you provide to understand your enquiry and respond to you.

Website enquiries

We collect your name, email address, optional company name, enquiry category and message. Authorised MCTO administrators and managers can review these records in the staff portal. Please do not include identity documents, bank details, medical information or confidential cargo and vessel-security documents.

Enquiries are stored using Supabase. Email forwarding is not currently connected. Commercial enquiries are intended for commercial@mcto.co.ke; other enquiries are intended for info@mcto.co.ke.

Website measurement

With your consent, we use Google Analytics 4 to measure public page visits, contact-link clicks and confirmed enquiries; Microsoft Clarity provides heatmaps and masked session recordings; and our own visit counter provides aggregate page and visit totals for staff reports. These tools do not run on staff portal pages. You can accept or reject them using the banner, then change your choice using Analytics preferences in the footer. Your choice is remembered for six months.

Choosing Reject analytics after accepting stops future collection, clears applicable analytics cookies on this website and reloads the page. You can still send an enquiry when analytics is rejected. Withdrawing consent does not automatically delete data already collected.

Our visit counter uses a temporary browser-session identifier to group page views. It expires after 30 minutes of inactivity or at the end of the reporting day, and does not identify returning visitors across days. Google Analytics and Microsoft Clarity use their own cookies after consent to recognise visits over time. We honour the browser’s Do Not Track setting. Our Google Analytics page events use page paths without URL query strings, and our events do not include enquiry details. The enquiry form and its feedback are masked in Clarity recordings.

Our raw visit-counter events are retained for 30 days, and daily totals for 12 months. They do not contain your enquiry, email address, raw IP address or URL query strings. Google Analytics and Microsoft Clarity maintain data under their respective retention settings; see the Google Privacy Policy and Microsoft Privacy Statement. Short-lived protected network identifiers are used separately to limit automated abuse.

Staff portal

Staff account and leave information is used to manage portal access and leave requests. Employees can view their own requests; authorised managers and administrators review applications. A brief leave reason is sufficient; medical details are not required. The portal uses browser storage to keep you signed in until you sign out or your session expires.

Questions and requests

Contact info@mcto.co.ke with questions or requests to access, correct or remove your information. Operational record-retention periods and the final company privacy notice will be confirmed with MCTO before general staff rollout.