Effective Date: 06.01.2025
Last Updated: 26.02.2021
This Privacy Policy describes how KLEMOLA LIMITED collects, uses, discloses, and safeguards your
personal data in accordance with the Kenya Data Protection Act, 2019 (DPA).
- Data Controller
KLEMOLA LIMITED
P.O BOX 5066-00506
klemolaltd@gmail.com
0727390966/0737496044
We are the data controller responsible for your personal data under the DPA. - Information We Collect
We may collect the following categories of personal data: – Identity Data: Names, national ID or passport number, KRA PIN. – Contact Data: Email address, phone number, postal or physical address. - How We Use Your Data – Project Data: Site locations, project descriptions, budget, and contractor details. – Financial Data: Payment records, billing information, bank account details. – Technical Data: IP address, browser type, and site activity if you visit our website. – Employment Data (if applicable): CVs, references, or certifications.
We process personal data for the following purposes: – To provide construction, renovation, and related services. – To manage contracts and fulfill obligations to clients or service providers. – For communication regarding ongoing projects or inquiries. – To comply with legal obligations under Kenyan law. – For marketing purposes, only with your consent.
1
- To improve our website, services, and customer experience.
- Lawful Basis for Processing
We process your data on the following lawful bases: – Your consent (e.g. for marketing). – Performance of a contract. – Compliance with a legal obligation. – Our legitimate business interests, where such interests do not override your rights. - Sharing of Personal Data
We may share your data with: – Subcontractors and consultants who work on your project. – Service providers (e.g. accountants, engineers, IT providers). – Legal and regulatory bodies (e.g. KRA or NCA) when required. – Law enforcement agencies if mandated by court order.
All third parties are contractually obligated to safeguard your data. - International Transfers
We do not transfer personal data outside Kenya unless: – You provide explicit consent, or - Data Retention – Appropriate safeguards (as defined under the DPA) are in place.
We retain your data only as long as necessary: – For the purposes stated above. – To comply with tax, legal, and regulatory requirements. – After this, we securely delete or anonymize the data.
2 - Your Rights Under the Kenya DPA
You have the right to: – Access and obtain a copy of your data. – Correct inaccurate or incomplete data. – Withdraw consent at any time. – Request deletion of your data. – Object to processing on legitimate grounds. – Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
To exercise these rights, contact us at klemolaltd@gmail.com - Data Security
We implement appropriate technical and organizational measures to protect your data from unauthorized
access, disclosure, alteration, or destruction. - Use of Cookies
If you visit our website, cookies may be used to improve your browsing experience. You can manage
cookie settings in your browser. - Updates to this Policy
- Contact
For questions, complaints, or to exercise your rights:
Data Protection Officer
KLEMOLA LIMITED
P.O BOX 5066-00506
We may revise this Privacy Policy. All updates will be posted on our website with the effective date.
klemolaltd@gmail.com
0727390966/0737496044
3