Privacy Policy
Your Privacy Matters to Us
Last Updated: 11 March 2026
1. Introduction
Grannex Group Limited ("GGL Construction", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our construction services, in compliance with the Data Protection Act, 2019 of Kenya.
2. Information We Collect
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, and physical address
- Project Information: Details about your construction project requirements and specifications
- Business Information: Company name, business registration details (if applicable)
- Communication Records: Correspondence, inquiries, and feedback you provide
- Website Usage Data: IP address, browser type, pages visited, and time spent on our website
3. How We Use Your Information
We use your personal information for the following purposes:
- To provide construction services and respond to your inquiries
- To prepare project quotes, proposals, and contracts
- To communicate with you about your projects and our services
- To improve our website and services
- To comply with legal obligations and regulatory requirements
- To send you marketing communications (with your consent)
4. Legal Basis for Processing
Under the Data Protection Act, 2019, we process your personal data based on:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for the performance of a contract with you
- Legal Obligation: Processing is necessary to comply with Kenyan law
- Legitimate Interests: Processing is necessary for our legitimate business interests
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third-party contractors, suppliers, and consultants who assist in our operations
- Legal Authorities: When required by law or to protect our legal rights
- Business Partners: With your consent, for collaborative projects
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
6. Your Rights Under Kenyan Law
Under the Data Protection Act, 2019, you have the following rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation on how we use your data
- Right to Data Portability: Request transfer of your data to another organization
- Right to Object: Object to processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time where we rely on consent
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Project-related data may be retained for up to 7 years in compliance with Kenyan tax and business regulations.
9. Cookies and Tracking Technologies
Our website may use cookies and similar tracking technologies to enhance user experience and analyze website traffic. You can control cookie preferences through your browser settings.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
