Privacy Policy

Emcor Hass Group Ltd is a private limited company incorporated under Cap 486 of the Laws of Kenya, located in Ruiru, Nairobi County. We are the data controller responsible for your personal information collected through this website and our business interactions.

This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Kenya Data Protection Act, 2019 (No. 24 of 2019).

We collect information you provide directly and information collected automatically when you use our website.

We do not collect payment card numbers, bank account details, or government ID numbers through our website.

We use your data only for the purposes for which it was collected:

• To process and fulfil your orders — preparing quotations, confirming availability, arranging delivery.
• To communicate with you — responding to enquiries, sending order updates, following up on quotes.
• To improve our website and services — understanding which products are most viewed, improving navigation and content.
• To comply with legal obligations — maintaining business records, invoicing, tax compliance under Kenyan law.
• To send relevant product information — only if you have opted in. You can unsubscribe at any time.

We will never sell, rent, or trade your personal data to third parties for marketing purposes.

We do not sell your personal data. We may share your data only in the following limited circumstances:

• Service providers: Third-party services that help us operate our website (e.g., Webflow for hosting, Google Analytics for usage data). These providers are contractually bound to handle data securely.
• Delivery partners: Courier or logistics companies who need your delivery address and contact details to fulfil your order.
• Legal requirements: If required by Kenyan law, court order, or regulatory authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

Our website uses cookies — small text files stored on your device — to improve your browsing experience and help us understand how the site is used.

• Essential cookies: Required for the website to function correctly. Cannot be disabled.
• Analytics cookies: Used by Webflow Analytics and Google Analytics to understand visitor behaviour. These are anonymised and do not identify you personally.

You can control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the website.

When you contact us via WhatsApp (+254 710 353 535), your messages and associated metadata are processed by WhatsApp LLC (Meta Platforms), subject to WhatsApp's own Privacy Policy. We use WhatsApp solely for business communications — responding to enquiries, sharing quotations, and updating you on orders.

• We do not store WhatsApp conversation data outside the WhatsApp platform.
• We will not send you unsolicited WhatsApp messages unless you have initiated contact.
• WhatsApp pre-filled messages generated by our website contain only product enquiry details you have reviewed before sending.

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

• Customer and transaction records: 7 years from the date of last transaction, in compliance with Kenyan tax and accounting regulations.
• Website enquiries with no resulting transaction: 12 months from the date of enquiry.
• Analytics data: 26 months (Google Analytics default retention).
• Email communications: 3 years from the last interaction.

When your data is no longer required, we securely delete or anonymise it.

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request that inaccurate or incomplete data be corrected.
• Right to deletion: Request deletion of your data where there is no legitimate reason for us to retain it.
• Right to object: Object to our processing of your data for marketing purposes.
• Right to data portability: Request transfer of your data to another organisation in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at info@emcorhassgroup.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is hosted on Webflow's secure infrastructure with HTTPS encryption.

While we take all reasonable steps to protect your data, no internet transmission is 100% secure. We cannot guarantee absolute security of data transmitted to or from our website.

Our website may contain links to third-party websites (such as WhatsApp, Google Maps, or supplier sites). This Privacy Policy applies only to emcorhassgroup.com. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will be revised accordingly. Continued use of our website after changes are published constitutes your acceptance of the updated policy.

For any questions, concerns, or data rights requests, please contact our Data Protection point of contact:

• Email: info@emcorhassgroup.com
• WhatsApp / Phone: +254 710 353 535
• Address: Emcor Hass Group Ltd, Ruiru, Nairobi County, Kenya
• Registered under: Cap 486, Laws of Kenya

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.