Privacy Policy

Last updated: January 2026

This policy explains how we handle personal data in line with the Kenya Data Protection Act, 2019. It is a general notice and not legal advice — please have it reviewed by a qualified advocate before relying on it.

This Privacy Policy describes how Summand Construction Group Limited ("Summand", "we", "us" or "our") collects, uses, discloses and protects your personal data when you visit summandgroup.com (the "Website") or contact us.

1. Who we are

Summand Construction Group Limited is a construction and development-management company based in Kiambu, Kenya. For any privacy questions, contact us at [email protected] or +254 708 536 186, Banana Post Office Rd, Banana Hill, Kiambu, Kenya.

2. What data we collect

• Information you give us — when you submit the contact form, we collect your name, email address, subject and message. When you email or call us, we hold whatever you choose to share.
• Technical data — like most websites, our hosting provider automatically logs limited technical information (such as IP address, browser type and pages visited) to keep the site secure and running.

We do not knowingly collect data from children, and we do not collect special-category data through this Website.

3. How we use your data

• To respond to your enquiries, quotes and requests;
• To provide, maintain and secure the Website;
• To communicate with you about your project or our services;
• To comply with legal and regulatory obligations.

Our lawful bases are your consent (which you may withdraw at any time), the performance of a contract or steps taken at your request, and our legitimate interest in operating our business.

4. Service providers we use

We share limited data with trusted providers who process it only on our instructions:

• Formspree — processes contact-form submissions and forwards them to our inbox.
• Cloudflare — hosts and secures the Website and its content delivery.
• Google Fonts — serves the fonts used on the Website; your browser requests these files from Google.

We do not sell your personal data to anyone.

5. Cookies

This Website does not use advertising or tracking cookies. Any storage used is strictly necessary for the site to function.

6. Data retention

We keep enquiry and contact data only for as long as needed to respond to you and to meet our legal and business obligations, after which it is securely deleted.

7. Your rights

Under the Data Protection Act, 2019 you have the right to access, correct, update or request deletion of your personal data, to object to or restrict its processing, and to withdraw consent. To exercise any of these, email [email protected]. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

8. Security

We apply reasonable technical and organisational measures to protect your data. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it was last revised.

10. Contact

Questions about this policy? Email [email protected].