Privacy Policy

AIMS is the official digital platform of the Anti-Counterfeit Authority for Intellectual Property Rights recordation, import-permit processing, agent admission and enforcement support.

By creating an account or using AIMS you acknowledge the practices described in this policy. If you do not agree, please do not use the portal.

We collect information you provide directly and information generated as you use AIMS, including:

• Identity and contact data — name, national ID or passport number, email, phone and address.
• Organisation data — business, partnership, association or company name and registration details.
• Application data — the contents of forms you submit and the documents you upload.
• Payment data — transaction references confirmed through the e-Citizen gateway (we do not store full card details).
• Technical data — log-in records, device and browser information, and audit trails of actions taken.

We use personal data to operate the recordation, renewal, permit, agent-admission, search and verification services; to verify identity and process payments; to communicate application status; to maintain the IPR registry; and to support enforcement and regulatory reporting obligations.

We process personal data where it is necessary for the performance of a public task or legal obligation under the Anti-Counterfeit Act and related regulations, and where you have given consent (for example, when you accept this policy during registration).

You may withdraw consent for non-essential processing at any time by contacting us, subject to our legal record-keeping duties.

We may share data with authorised partner government agencies (such as KRA, KEBS and the Kenya Police) for compliance and enforcement, and with the e-Citizen payment platform to process fees. Public IPR searches return only the limited fields approved for disclosure.

We do not sell personal data. Sensitive commercial intelligence — such as product unit prices and authorised importer lists — is restricted to authorised ACA users and is not published.

We retain records for as long as necessary to fulfil the purposes described here and to comply with statutory retention and audit requirements. Archived accounts are retained, not erased, to preserve audit trails.

AIMS applies role-based access control, encryption in transit, multi-factor authentication and audit logging. While we take reasonable measures to protect your data, no system can be guaranteed completely secure.

Subject to the Data Protection Act, you may request access to, correction of, or restriction of your personal data, and may lodge a complaint with the Office of the Data Protection Commissioner. Requests can be made through the contact details below.

AIMS uses essential session cookies to keep you signed in and to secure your session. We do not use third-party advertising cookies.

We may update this policy from time to time. Material changes will be communicated through the portal. The “last updated” date above reflects the current version.