Introduction
Caldan Construction and Consultancy Firm ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or interact with our services.
We are compliant with the Kenya Data Protection Act, 2019 and are committed to upholding the highest standards of data protection and privacy.
Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide when you:
- Fill out our contact form
- Submit a quote request
- Sign up for our newsletter (if applicable)
- Communicate with us via email, phone, or social media
The personal information we collect may include:
- Name — Your full name
- Email Address — Your primary email for communication
- Phone Number — Your contact number
- Project Details — Information about your construction project
- Budget and Timeline — Your project budget and timeline preferences
2.2 Automatically Collected Information
When you visit our website, we automatically collect certain information:
- IP Address — Your device's internet protocol address
- Browser Type — The browser you are using
- Device Information — Device type, operating system, screen resolution
- Pages Visited — Which pages you view and for how long
- Referring URLs — How you arrived at our website
We use this information to improve our website, analyze trends, and enhance your experience.
How We Use Your Information
We use your personal information for the following purposes:
- To Provide Services — Respond to your inquiries, provide quotes, and deliver construction services
- To Communicate — Send you updates about your project, respond to your messages, and notify you of important information
- To Improve Our Services — Analyze feedback and enhance our offerings
- To Comply with Legal Obligations — Meet regulatory requirements and legal processes
- To Protect Our Rights — Prevent fraud, abuse, and unauthorized access
Legal Basis for Processing
Under the Kenya Data Protection Act, we process your personal data based on the following legal grounds:
- Consent — You have given us explicit consent to process your data
- Contractual Necessity — Processing is necessary for the performance of a contract with you
- Legal Obligation — Processing is required by law
- Legitimate Interest — Processing is necessary for our legitimate business interests, provided your rights are not overridden
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your data with:
- Service Providers — Third-party vendors who assist us in operating our website and delivering services (e.g., hosting, email delivery, payment processing)
- Legal Authorities — When required by law or to protect our rights
- Business Partners — With your explicit consent, we may share information with trusted partners for specific services
All third-party providers are bound by strict confidentiality agreements and data protection obligations.
Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption — All data transmitted is encrypted using TLS/SSL
- Access Controls — Restricted access to personal data on a need-to-know basis
- Regular Audits — Periodic security reviews and vulnerability assessments
- Secure Storage — Your data is stored in secure, access-controlled environments
- SHA-256 Hashing — Sensitive data is hashed using SHA-256 for integrity
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. Our retention periods are:
- Contact Submissions — 5 years
- Quote Requests — 5 years
- Project Data — 7 years (for project and financial records)
- Audit Logs — 365 days
After the retention period, we securely delete or anonymize your personal data.
Your Rights Under Kenya's Data Protection Act
You have the following rights regarding your personal data:
- Right to Access — Request a copy of the personal data we hold about you
- Right to Rectification — Request correction of inaccurate or incomplete data
- Right to Erasure — Request deletion of your personal data (subject to legal requirements)
- Right to Restriction — Request restriction of processing in certain circumstances
- Right to Object — Object to processing of your personal data
- Right to Data Portability — Request transfer of your data to another service provider
- Right to Withdraw Consent — Withdraw your consent at any time
To exercise any of these rights, please contact us using the details provided in Section 12.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. Please refer to our Cookie Policy for detailed information.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete it.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
- Email: info.caldanconstruction@gmail.com
- Phone: +254703653010
- Address: Nairobi, Kenya
We will respond to your inquiry within 15 business days.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated policy on this page with a new "Last Updated" date. We encourage you to review this policy periodically to stay informed about how we protect your privacy.