Privacy Policy

Who is responsible for your data

Jossie Construction Limited is the data controller. We decide what personal data is collected through this website and what happens to it.

Our registered address is undefined, P.O. Box 2694 - 00621, Village Market. You can reach us about anything in this policy at jossieconstruction@ymail.com or 0797 119 009.

Where registration as a data controller with the Office of the Data Protection Commissioner applies to us, our registration details are available on request.

What we collect, and why

We collect only what we need to answer an enquiry and to keep the site working. There is no profiling, no automated decision-making, and we do not sell personal data to anyone.

Enquiry details

Your name, email address, phone number, the service you are asking about, the location and timeline of your project, and whatever you write in the message. We use this to respond to you and to keep a record of the enquiry. Without it we cannot reply.

Newsletter address

If you subscribe, we store your email address and which page you subscribed from, so we can send you the material you asked for. You can ask us to remove it at any time.

Analytics

If you accept analytics cookies, Google Analytics 4 and Microsoft Clarity record how pages are used — which pages are visited, roughly where visitors are, and how they move through the site. This is used to improve the site, not to identify you. If you decline, these do not load at all.

Technical logs

Our web server records the IP address, browser and page of each request, and keeps it briefly. This is how we detect abuse and diagnose faults. It is a necessary part of running a website securely.

Session cookie

If you are a member of staff signing in to the administration area, a strictly necessary cookie keeps you signed in. It is never set for ordinary visitors.

Our lawful basis

Under section 30 of the Data Protection Act 2019, we rely on the following grounds:

Your consent

For analytics cookies and for newsletter emails. You give it freely and can withdraw it at any time, without affecting anything done before you withdrew it.

Steps taken at your request before entering a contract

For responding to your enquiry and preparing a quotation.

Our legitimate interests

For keeping the site secure and available, and for keeping records of enquiries we have handled. We have considered your interests and do not believe these override them.

Who else sees your data

We use a small number of service providers to run this site. Each of them only receives what they need to perform their function, and none of them is permitted to use your data for their own purposes.

Resend

Delivers the enquiry notification to our office and the acknowledgement to you. It processes your name, email address and the content of your message.

Google Analytics 4 and Microsoft Clarity

Website analytics, loaded only if you accept analytics cookies.

Chatbase

Powers the chat widget. If you type into it, that conversation is processed by Chatbase.

Contabo

Hosts the server on which the site and its database run.

Data leaving Kenya

Some of the providers above process data outside Kenya, principally in the European Union and the United States. Part V of the Data Protection Act 2019 permits such transfers where appropriate safeguards are in place, and we rely on the contractual protections offered by each provider.

If you would rather your data did not leave Kenya, contact us by telephone instead of using the form and we will take your enquiry that way.

How long we keep it

Enquiries are kept for as long as we may reasonably need them — while we are in discussion with you, for the duration of any resulting project, and afterwards for the period we are required to retain project records.

Newsletter addresses are kept until you unsubscribe. Technical logs are kept briefly and then discarded. Analytics data is retained according to the settings in Google Analytics and Microsoft Clarity.

If you ask us to delete your data and we have no legal reason to keep it, we will.

Your rights

The Data Protection Act 2019 gives you the right to:

Be informed

About how your data is being used — which is what this page is for.

Access

Ask for a copy of the personal data we hold about you.

Correction

Have inaccurate or incomplete data corrected.

Deletion

Ask us to delete data we no longer have a lawful reason to keep.

Object

Object to processing based on our legitimate interests.

Portability

Receive your data in a usable format where that applies.

Withdraw consent

At any time, for anything we do on the basis of consent.

To exercise any of these, write to jossieconstruction@ymail.com. We will respond as soon as we can and in any event within the time the Act allows. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.

If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.

How we protect it

The site is served over HTTPS. Enquiries are stored in a database that is not reachable from the internet. Access to the administration area requires a password, is limited to staff who need it, and sessions can be revoked. We validate and rate-limit what the public forms accept, and we escape everything you type before it appears in an email.

No system is perfectly secure, and we do not claim otherwise. If a breach occurs that is likely to affect your rights, we will notify you and the Office of the Data Protection Commissioner as the Act requires.

Children

This site is aimed at people commissioning construction work. We do not knowingly collect data from children. If you believe a child has sent us personal data, tell us and we will remove it.

Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. Material changes will be made prominent rather than slipped in quietly.