1. Introduction
CUMA Engineering & Construction Ltd ("we", "us", "our", "CUMA Engineering") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website or services.
2. Information We Collect
We may collect the following types of information:
- Personal Identification Information: Name, email address, phone number, physical address, and company name when you submit a quote request, contact form, or create an account.
- Transaction Data: Details about products you have enquired about, purchased, or requested quotes for, including payment information (processed securely through third-party gateways).
- Technical Data: IP address, browser type and version, device information, operating system, time zone setting, and browsing behaviour collected through cookies and similar technologies.
- Communication Data: Records of your correspondence with us via email, phone, live chat, or social media.
3. How We Collect Information
We collect information through:
- Direct interactions: When you fill out forms on our website, request a quote, subscribe to our newsletter, contact us, or visit our premises.
- Automated technologies: As you browse our site, we use cookies, server logs, and analytics tools to collect technical data about your device and browsing patterns.
- Third parties: We may receive information from analytics providers (such as Google Analytics), advertising networks, and payment processors.
4. How We Use Your Information
We use your personal data for the following purposes:
- To process and respond to your quote requests, enquiries, and orders.
- To provide customer support and after-sales service.
- To send you product updates, promotional offers, and newsletters (with your consent where required by law).
- To improve our website, products, and services through analytics and user feedback.
- To comply with legal obligations, resolve disputes, and enforce our agreements.
- To detect and prevent fraudulent or unauthorised activity.
5. Legal Basis for Processing (GDPR / DPA)
If you are located in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is based on the following lawful grounds:
- Consent: Where you have given clear consent for us to process your data for specific purposes (e.g., marketing emails).
- Contractual necessity: Where processing is necessary to fulfil a contract with you (e.g., processing a quote request).
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.
- Legal obligation: Where we need to comply with a legal or regulatory obligation.
6. Data Sharing & Disclosure
We may share your personal data with:
- Service providers: Third-party vendors who help us operate our website, process payments, deliver products, or send communications (e.g., payment gateways, couriers, email platforms).
- Legal authorities: When required by law, court order, or government regulation, or to protect our rights, property, or safety.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
We do not sell, rent, or trade your personal information to third parties for their own marketing purposes without your explicit consent.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically:
- Quote and order records are retained for up to 6 years as required by Kenyan tax law.
- Marketing data is retained until you unsubscribe or request deletion.
- Cookie data is retained in accordance with our Cookie Policy.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your data where there is no compelling reason for continued processing.
- Right to restrict processing: Request that we limit how we use your data in certain circumstances.
- Right to data portability: Request transfer of your data to another service provider in a machine-readable format.
- Right to object: Object to processing of your data for direct marketing or legitimate interest purposes.
- Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, please contact us using the details in Section 13 below. We will respond to your request within 30 days.
9. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and serve relevant advertisements. Cookies are small text files stored on your device by your web browser.
We use the following types of cookies:
- Essential cookies: Necessary for the website to function correctly (e.g., session management, cart functionality).
- Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
- Functional cookies: Remember your preferences and settings for a personalised experience.
- Advertising cookies: Track your browsing habits to deliver targeted advertisements.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
10. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:
- Secure Socket Layer (SSL) encryption for data transmitted via our website.
- Firewalls, access controls, and regular security audits.
- Staff training on data protection best practices.
- Strict contractual obligations on third-party data processors.
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
11. Third-Party Links
Our website may contain links to third-party websites, plug-ins, and applications. Clicking those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.
12. Children's Privacy
Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete the information.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: cumaengineeringandc@gmail.com
- Phone: +254 743 836 109 / +254 721 628 992 / +254 710 745 840
- Address: KAMAKIS, EASTERN BYPASS, NAIROBI, KENYA
- Website: cumaengineering.com/contact
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.