How we collect, use, share, and protect your personal data — and the rights you have over it under Kenya's Data Protection Act, 2019.
GAKUMIRI ENTERPRISES LIMITED supplies construction materials and agricultural inputs, and delivers them to our customers' sites. To quote for that work, deliver it, and get paid for it, we need some information about you. This policy explains exactly what we collect, why we need it, who else sees it, and how you can have it changed or deleted.
We have written it in plain language rather than legal jargon. If anything here is unclear, please ask us — our contact details are at the end.
For the purposes of the Data Protection Act, 2019, the data controller is:
This means we decide what personal data is collected through this website and what it is used for, and we are responsible for looking after it.
We only collect information you give us, and only where we need it to do something for you. We do not buy personal data from anyone, and we do not track you around the internet.
Generating a quotation requires you to sign in with a Google account, so that your quotation stays private to you. We receive and store:
We never see or store your Google password. Sign-in is handled entirely by Google.
Through the contact form we collect your name, phone number, email address, the subject you choose, and the message you write.
Through the careers form we collect your name, phone number, email address, the position you are applying for, and anything you tell us about yourself in your message. If you choose to attach a CV, we also store that document and its file name. Attaching a CV is optional.
CVs are stored privately and can be opened only by our named administrators — they are not published, not shared, and not readable by anyone visiting the website. When an unsuccessful application is deleted, the CV attached to it is deleted at the same time.
We collect the name or company you choose to give — you may submit anonymously — and the testimonial itself. If we publish it, we publish only the name and the words you gave us. We never publish your phone number or email address alongside a testimonial.
Like any website, ours is delivered by hosting and content providers that automatically receive limited technical information in order to serve the page to you. This includes your IP address, the type of device and browser you are using, and the pages you request. We use this only to keep the site running and secure.
We do not use advertising cookies, and we do not sell or share anything for advertising. We use Google Analytics to understand how the site is used — which pages people visit and which are not working well — and that does set cookies.
Analytics only runs if you agree to it. The first time you visit we ask, and nothing is collected unless you choose Accept. If you decline, Google's code is never loaded at all. Your choice is remembered on your own device; to change it, clear this site's browsing data and you will be asked again.
The rest of what we store on your device is what the site needs in order to work:
| What | Why | How long |
|---|---|---|
| Theme preference | Remembers whether you chose the light or dark version of the site | Until you clear your browser data |
| Selected products | Remembers the items you picked, so your list survives moving between pages | Until you clear it or complete a quotation |
| Latest quotation reference | Stores your most recent quotation number and phone number so the tracking page can find your order | Until you clear your browser data |
| Sign-in session | Keeps you signed in as you move between pages, so you are not asked to sign in repeatedly | Until you sign out or clear your browser data |
| Your cookie choice | Remembers whether you accepted or declined analytics, so we stop asking | Until you clear your browser data |
| Google Analytics (only if you accept) | Counts visits and shows which pages are used, so we can improve the site. It does not identify you by name | Up to 2 years, or until you clear your browser data |
All of this stays on your own device and can be removed at any time by signing out or clearing your browser data. None of it is used for advertising.
The Data Protection Act requires us to have a lawful reason for using your personal data. Ours are set out below.
| What we do | Why | Lawful basis |
|---|---|---|
| Prepare and send your quotation | So we can price your order and you have a document to work from | Necessary to take steps at your request before entering a contract |
| Deliver your order and keep you updated | We need the destination and phone number to reach your site | Performance of our contract with you |
| Reply to your enquiry | So we can answer the question you asked us | Your consent, given by sending us the message |
| Consider your job application | To assess you for the role you applied for | Steps taken at your request before employment |
| Publish your testimonial | To show prospective customers real feedback | Your consent, which you may withdraw at any time |
| Keep records of quotations and sales | Tax, accounting and audit obligations | Compliance with a legal obligation |
| Keep the website secure and working | To prevent abuse and diagnose faults | Our legitimate interest in running the business safely |
| Measure how the site is used | To see which pages help customers and which need fixing | Your consent, given through the cookie banner and withdrawable at any time |
Where we rely on your consent, you may withdraw it at any time by contacting us. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
We do not sell your personal data, and we never share it for advertising. We share it only with the service providers we need in order to run the website and reply to you, and only to the extent that they need it:
We may also disclose personal data where we are legally required to do so, for example to a court, tax authority or regulator acting within its powers.
The service providers listed above operate servers outside Kenya, which means your personal data is transferred to and stored in other countries. We rely on those providers' contractual data-protection commitments and their own security standards to ensure your data receives appropriate protection, as required by the Data Protection Act.
| Record | Kept for |
|---|---|
| Quotations, orders and delivery records | 7 years, so we can meet tax, accounting and audit obligations |
| Enquiries sent through the contact form | 7 years, as these commonly relate to a sale |
| Unsuccessful job applications | 6 months, in case a suitable vacancy comes up, and then deleted — including any CV attached |
| Testimonials | Until you ask us to remove yours |
| Information stored in your browser | Until you sign out or clear your browser data |
When a retention period ends, we delete the record or remove the details that identify you. You can ask us to delete your data sooner — see your rights below.
No system can be guaranteed completely secure, but we take these measures seriously and review them as the site changes.
Under the Data Protection Act, 2019, you have the right to:
To exercise any of these rights, email gakumiri@gmail.com or call 0727 693 574. Please tell us what you would like us to do, and give us enough detail to find your records — for example your quotation number, or the phone number or email address you used.
We will respond as quickly as we can, and within 30 days at the latest. There is no charge for making a request. We may ask you to confirm your identity first, so that we do not release someone else's information to the wrong person.
If you are unhappy with how we have handled your personal data, please contact us first — we would rather put it right directly. You also have the right to complain to Kenya's data protection regulator:
This website is intended for businesses and adult customers. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their information, please contact us and we will delete it.
We may update this policy as our services change — for example if we begin accepting payments online, or start using website analytics. When we do, we will change the effective date at the top of this page. If a change materially affects how we use your data, we will make that clear on the website.
For any question about this policy, or about your personal data:
