Privacy Policy

Section 1Who we are

Preco Concrete Limited is a precast concrete manufacturer and paving contractor with its factory and yard at Zambia Stage, Ngong, Nairobi, Kenya. We sell and deliver concrete products, and we carry out paving, kerbing, drainage, landscaping, car shades, electric fencing and civil works.

For the purposes of the Data Protection Act, 2019, Preco Concrete Limited is the data controller. That means we decide what personal data is collected and what it is used for, and we are answerable for how it is handled.

Section 2Information we collect

Information you give us

When you request a quotation, add products to a quote list, fill in a form or contact us directly, we collect:

• your name;
• your company or organisation name, where you give one;
• your email address;
• your telephone or WhatsApp number;
• the location of your project;
• details of the project and what you are asking us to quote for;
• the products, quantities and specifications you select;
• a record that you agreed to be contacted about the request, and when.

If you go on to place an order, we also hold the delivery address, the quantities supplied, the dates of delivery or installation, and the invoicing and payment records that go with the job.

Information collected automatically

When you use the website, our systems record a limited amount of technical information:

• Your IP address. On quotation records this is stored only as a one way hash, never as the address itself. The hash lets us apply limits that stop automated abuse of the quote form, and it cannot be read back as your IP address.
• Your browser and device information, as reported by your browser.
• The page that referred you to the form, and a unique reference for the submission.
• Standard server and security logs kept by our hosting provider, which record requests made to the site.

What we do not collect

• We do not take card or mobile money payment details through this website. Payment for an order is arranged with you separately.
• We do not collect sensitive personal data as defined by the Data Protection Act, such as information about health, religion, ethnicity or political affiliation, and you should not send it to us.
• We do not buy personal data from third parties, and we do not build profiles of visitors for advertising.

Section 3How we use your information

We use the information above to:

• prepare and send you a quotation, including working out quantities for your project;
• answer your enquiry and discuss the specification with you;
• supply, deliver and install what you order, and keep you updated on it;
• invoice you and keep proper accounting records;
• handle any complaint, defect or warranty question afterwards;
• protect the website and our systems from spam, fraud and attack;
• meet our legal and tax obligations;
• send you updates about our products or services, but only where you have asked us to.

We do not sell, rent or trade your personal data to anyone.

Section 4Our lawful basis

The Data Protection Act requires us to have a lawful basis for processing personal data. Ours are as follows.

Section 5Cookies and similar technologies

A cookie is a small file a website stores on your device. We use them sparingly, and for the following purposes.

• Necessary cookies. These keep your quote list and session working as you move between pages, and support security checks. The site cannot function properly without them.
• Performance and caching. Our caching system and content delivery network use cookies and similar identifiers to serve pages quickly and correctly.
• Spam prevention. We use Google reCAPTCHA on our forms to tell real enquiries from automated submissions. Google sets cookies and collects device and usage information for this purpose, under its own privacy policy.

You can block or delete cookies in your browser settings. If you block necessary cookies, parts of the site such as the quote list will stop working.

Section 6Who we share information with

We share personal data only where it is needed to run the business, and only with parties who are required to protect it. These are the service providers that handle data on our behalf.

We may also share information with our accountants, auditors and legal advisers where they need it to advise us, and with a public authority, regulator or court where the law requires us to.

If the business is ever sold or reorganised, customer records may transfer to the new owner. We would tell you before that happened.

Section 7Transfers outside Kenya

Some of the providers listed above operate servers outside Kenya, so your information may be processed in another country. Where that happens we satisfy ourselves that the transfer meets the conditions set out in the Data Protection Act, including that the recipient has appropriate safeguards in place to protect the data. You can ask us for more detail on any particular transfer.

Section 8How long we keep information

We keep personal data only for as long as there is a reason to, and then we delete it.

• Quotation requests that do not lead to an order: up to 24 months from your last contact with us, since clients often return to a quotation a season or two later.
• Records relating to completed orders, including invoices and delivery records: at least five years, because tax and accounting law requires us to keep them.
• Website and security logs: a short period set by our hosting and security providers, typically a matter of weeks.
• Marketing contact details: until you withdraw your consent, after which we keep only the minimum record needed to make sure we do not contact you again.

You can ask us to delete your information sooner, and we will do so unless we are required to keep it.

Section 9How we protect information

The measures we take include:

• serving the whole website over an encrypted connection;
• storing IP addresses on quotation records as one way hashes rather than as the addresses themselves;
• keeping generated documents, such as quotation PDFs, in storage that is not reachable directly over the web;
• limiting access to quotation and customer records to the staff who need it;
• rate limiting and spam filtering on public forms;
• keeping the website, its plugins and its security software up to date.

No system is completely secure. If a breach occurs that is likely to affect your rights and freedoms, we will notify the Office of the Data Protection Commissioner and, where the Act requires it, we will tell you directly.

Section 10Your rights

Under the Data Protection Act, 2019 you have the right:

• to be told how your personal data is being used, which is what this policy is for;
• to ask for a copy of the personal data we hold about you;
• to have inaccurate or misleading data corrected;
• to have your data deleted, where we have no continuing reason to keep it;
• to object to our processing of your data, in whole or in part;
• to ask us to restrict how we use your data while a question about it is resolved;
• to receive your data in a usable format, or to have it sent to another provider;
• to withdraw consent at any time, where our basis for processing was your consent.

Using any of these rights is free, and doing so will not affect the service you receive from us.

Section 11Using your rights, and complaints

To use any of the rights above, email hello@precoconcrete.com or write to us at the address below, telling us what you would like us to do. We may ask you to confirm your identity before we act, so that we do not disclose your information to someone else. We will respond as soon as we can, and in any case within the period allowed by law.

If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner, the regulator for data protection in Kenya, at odpc.go.ke. We would rather you came to us first, so we have the chance to put it right.

Section 12Marketing messages

We will only send you marketing messages about our products and services if you have asked us to. Asking us for a quotation is not consent to marketing, and we do not treat it as such.

Every marketing email carries a way to unsubscribe, and you can also ask us to stop at any time by emailing hello@precoconcrete.com. We will still send you the messages needed to deal with your quotation or order, because those are part of the service rather than marketing.

Section 13Children

Our products and services are sold to businesses and to adults, and the website is not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has given us their information, contact us and we will delete it.

Section 14Changes to this policy

We will update this policy when our practices change or when the law requires it. The version number and the date at the top of the page tell you which version you are reading. Where a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention rather than relying on you to notice.

Section 15Contact us

For any question about this policy, about the information we hold, or to use any of your rights:

Back to the top of this policy