Privacy Policy

Effective date: 26 September 2026.

This launch-stage policy remains subject to comprehensive review by a qualified Kenyan lawyer. It is informed by Kenya’s Data Protection Act, 2019 and Data Protection (General) Regulations, 2021 and does not claim universal compliance with foreign privacy regimes.

1. Data controller and contact

Golden Hammer Limited determines how personal data is used for the Golden Hammer marketplace in the circumstances described here. Contact privacy questions at info@hammer.co.ke or (+254) 708 897 441. No privacy officer or physical address is stated unless separately verified and approved.

2. Information we may collect

We may collect identity and contact details; account credentials in protected form; buyer, supplier, nominated-payer, driver and site-contact information; business-verification information; product, order and payment records; construction-site, dispatch-origin and delivery details; support communications; device, log, cookie and analytics data; and fraud, security or compliance records.

We do not need users to send passwords, one-time codes or complete payment credentials through ordinary support channels.

3. Why we process information

Purposes may include creating and securing accounts; reviewing supplier applications; presenting catalogue information; preparing and managing requests and orders; enabling nominated-payer review; verifying payment; releasing suppliers; coordinating separate delivery legs; recording pickup and delivery evidence; handling returns, complaints and support; reconciliation and manual supplier settlement; preventing fraud; maintaining audit records; meeting legal obligations; and improving the service.

4. Lawful basis and transparency

Depending on the activity, processing may be necessary to take requested steps or perform a contract, comply with law, protect legitimate marketplace and security interests, establish or defend legal claims, protect vital interests, or act on valid consent. Where consent is relied on, it must be specific and may be withdrawn subject to lawful retention needs.

5. Information about other people

A requester may provide payer, site-contact or other authorised-person details. The requester must have a lawful reason and authority to provide them and should ensure that the person receives appropriate notice.

6. Sharing

We may share the minimum necessary information with participating suppliers, nominated payers, delivery providers, drivers, payment or banking service providers, hosting and technology processors, professional advisers, regulators, courts or law-enforcement bodies where authorised or required. A supplier or driver receives only information needed for the assigned transaction or delivery leg.

7. Payment information

Payment references, status, amount and verification records may be processed. Complete credentials should remain with the relevant authorised provider. A screenshot or message is not proof of cleared funds.

8. Construction-site and delivery information

Site addresses, contacts, access notes, safety information, map data and delivery evidence may be needed to coordinate a leg. Access is limited according to role and operational need.

9. Retention

We retain information only as long as reasonably necessary for the stated purpose, transaction records, tax or accounting needs, security, disputes, legal obligations and audit. Retention periods may differ by record. Data may be restricted, anonymised or deleted when no longer required, subject to lawful exceptions.

10. Security

We use administrative, organisational and technical safeguards appropriate to the information and risk. No online system can be guaranteed completely secure. Users must protect credentials and report suspected misuse promptly.

11. International transfers and processors

Some service providers may process data outside Kenya. Where this occurs, Golden Hammer must assess and use safeguards required by Kenyan law. This draft does not claim that every current or future transfer has already been approved.

12. Your rights

Subject to Kenyan law and lawful exceptions, a data subject may ask to be informed about use, access personal data, object to processing, correct false or misleading data, and request deletion of false or misleading data. Other rights or restrictions may apply under the Act and Regulations. We may need to verify identity and authority before acting.

13. Complaints

Contact Golden Hammer first so the issue can be reviewed. A person may also have the right to complain to Kenya’s Office of the Data Protection Commissioner through its official channels.

14. Cookies and analytics

The site may use necessary cookies for security, sessions and core functions and limited analytics or preference technologies where configured. Controls should reflect the technologies actually active; this policy does not authorise undisclosed tracking.

15. Children

Golden Hammer is intended for people able to enter or act for legitimate construction-procurement transactions. We do not knowingly seek children’s data for independent marketplace use. A parent, guardian or authorised representative should contact us about a concern.

16. Automated decisions

Golden Hammer should not make a decision with significant legal or similar effect solely by automated means unless lawfully configured with appropriate safeguards and notice.

17. Updates

Material changes will be published with an updated effective date. Changes do not rewrite historical transaction or audit records.

18. Contact

Email info@hammer.co.ke or call (+254) 708 897 441.