Privacy Policy

1. Who We Are

GrossMerit Enterprises ("we", "us", "our") is a company registered in Kenya, operating from Komarock 69 Plaza, Komarock Road, P.O Box 1981-00621, Village Market, Nairobi, Kenya. We provide services in Branding, Events Management, Supplies, Real Estate and Fashion.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit grossmerit.co.ke or contact us through our website.

2. Information We Collect

We collect information you provide directly to us through our contact form, including:

• Full name
• Email address
• Phone / WhatsApp number (optional)
• Service of interest and message content
• IP address and approximate location (for spam prevention)
• UTM source (to understand how you found us)

We do not collect any sensitive personal data such as financial information, national ID numbers or health data.

3. How We Use Your Information

The information you provide is used solely to:

• Respond to your enquiry or service request
• Send you a notification email about your submission
• Protect against spam and automated abuse
• Understand how visitors find our website (analytics)

We do not use your data for unsolicited marketing without your consent.

4. How We Store Your Data

Your contact form submissions are stored in a secure database on our hosting server located in the European Union. Access to this data is restricted to authorised GrossMerit staff only.

We retain contact form data for a maximum of 2 years, after which it is permanently deleted unless we are required by law to retain it longer.

5. Sharing Your Information

We do not sell, rent or trade your personal information to any third parties. We may share your information only in the following limited circumstances:

• Service providers: Our web hosting provider processes data on our behalf under strict confidentiality agreements
• Legal requirements: If required by Kenyan law or a valid court order
• Business protection: To prevent fraud or protect the rights of GrossMerit Enterprises

6. Cookies & Third-Party Services

Our website uses the following third-party services that may load resources from external servers:

• Google Fonts — to load our website typography (fonts.googleapis.com)
• Cloudflare CDN (cdnjs) — to load Font Awesome icons (cdnjs.cloudflare.com)

These services may set their own cookies or log your IP address in accordance with their own privacy policies. We do not use advertising cookies, tracking pixels or analytics services such as Google Analytics at this time.

7. Your Rights

Under applicable Kenyan data protection law (Data Protection Act, 2019), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to how we use your data
• Withdraw consent at any time

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Our website uses HTTPS encryption for all data in transit. However, no method of internet transmission is 100% secure and we cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us immediately so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: