Privacy notice
What we collect, and why
This notice covers hkmconstruction.co.ke. It describes exactly what this website records, what happens to it, and what you can ask us to do about it. Last updated 31 August 2026.
Who we are
HKM Construction Ltd, Dormans, Nanyuki, Laikipia, Kenya. We are the data controller for anything described here. For any question about your information, or to make any of the requests below, write to info@hkmconstruction.co.ke.
What the enquiry form collects
When you send an enquiry we record your name, email address, the site location and project type you give, your timeline, and your message. Your phone number, budget range, preferred contact method and how you heard about us are optional, and we only hold them if you choose to give them.
We use this to reply to you and to carry the conversation forward if it becomes a project. We do not sell it, and we do not pass it to advertisers.
What the site records about your visit
If you arrive through a campaign link, we keep the campaign tags in that link. We also record the site that referred you, the first page you landed on, and the pages you looked at during that visit, so that an enquiry can be attributed to whatever brought you here. We record when someone taps a WhatsApp, email or phone link, as a count, without identifying who did it.
We do not store IP addresses. To stop the form being abused, an address is converted into a one-way salted hash that cannot be turned back into the original, and only that hash is kept, briefly.
Cookies
The campaign information described above is held in your own browser's session storage and disappears when you close the tab. Our traffic and performance measurement is aggregate and cookieless.
One exception. Our quote page, which is where our Google adverts lead, loads Google's conversion measurement so we can tell which adverts produce genuine enquiries rather than only clicks. That sets a cookie in your browser for that purpose. It loads on that page alone, and nowhere else on this site.
Who else handles it
Vercel hosts the website. Supabase stores enquiries, on servers in Germany. Our email is hosted by hostns.io, which carries the notification we receive and the confirmation sent to you. Google measures which of our adverts led to an enquiry. They process this data on our instructions, and nobody else does.
How long we keep it
Enquiries are kept for as long as we may reasonably need them for the working relationship, and no longer than three years after our last contact with you unless you become a client, in which case project records are kept for as long as the law requires. Visit and campaign records are kept for two years.
Your rights
Under Kenya's Data Protection Act 2019 you may ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to info@hkmconstruction.co.ke and we will respond within the statutory period.
If you think we have handled your information badly, you may complain to the Office of the Data Protection Commissioner in Kenya.
Changes
If what we collect changes, this page changes with it and the date at the top moves. There is no separate notice, so it is worth checking here.