Privacy Policy

Firmbridge Engineering Enterprises Limited ("Firmbridge", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at firmbridgeengineeringenterprises.com or engage our engineering services.

We are registered in Kenya and operate in compliance with the Data Protection Act, 2019 of Kenya and applicable international standards including the General Data Protection Regulation (GDPR) for visitors from the European Economic Area.

By using our website or services, you consent to the practices described in this policy. If you do not agree, please discontinue use of our services.

We collect information to provide and improve our engineering services. This includes:

2.1 Personal Information You Provide

• Contact Details: Name, email address, phone number, and physical address when you request quotes or contact us.
• Project Information: Details about your construction or engineering project, location, budget range, and timeline requirements.
• Communications: Records of emails, WhatsApp messages, phone calls, and meetings.
• Testimonials: Reviews and feedback you voluntarily submit about our services.

2.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system, and device type.
• Usage Data: Pages visited, time spent on site, click patterns, and referral sources.
• Location Data: Approximate geographic location derived from your IP address.

We use your personal data for the following purposes:

We do not sell your personal information to third parties for marketing purposes.

For individuals in the European Economic Area (EEA), our legal basis for processing personal data is:

• CONSENT When you voluntarily submit contact forms, quote requests, or testimonials.
• CONTRACT When processing is necessary to fulfill a contract or prepare a quote at your request.
• LEGITIMATE For website analytics, security monitoring, and business improvement.
• LEGAL To comply with tax, accounting, and regulatory obligations in Kenya.

We may share your information with:

• Service Providers: Hosting providers (cPanel/cloud), email services, and analytics platforms (Google Analytics).
• Professional Advisors: Legal counsel, auditors, and insurance providers when required.
• Regulatory Authorities: Kenya Revenue Authority (KRA) and other government bodies as required by law.
• Project Partners: Subcontractors and suppliers strictly necessary for project execution (with your prior consent).

Our website uses cookies and similar technologies to enhance your browsing experience:

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

We implement appropriate technical and organizational measures to protect your data:

• Encryption: SSL/TLS encryption for all data transmission (HTTPS).
• Access Controls: Role-based access for admin users with session timeouts and 2FA-ready infrastructure.
• Secure Hosting: Production environment with firewall protection and regular security updates.
• Data Minimization: We only collect data necessary for the stated purposes.

However, no internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal data only for as long as necessary:

• Quote Inquiries: 2 years from last contact (for follow-up and record-keeping).
• Project Clients: 7 years after project completion (legal and tax requirements).
• Testimonials: Until you request removal or withdraw consent.
• Analytics Data: 26 months (Google Analytics default).

Depending on your location, you have the following rights regarding your personal data:

To exercise these rights, contact us using the details in Section 12. We will respond within 30 days.

As a data controller and processor operating in Kenya, we comply with the Data Protection Act, 2019 and regulations issued by the Office of the Data Protection Commissioner (ODPC).

Under Kenyan law, you have the right to:

• Be informed of the use to which your personal data is to be put.
• Access your personal data in our custody.
• Object to processing of all or part of your personal data.
• Correction of false or misleading data.
• Deletion of false or misleading data about you.

For complaints, you may contact the Office of the Data Protection Commissioner at www.odpc.go.ke.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of significant changes by:

• Posting the updated policy on this page with a revised "Last updated" date.
• Notifying active clients via email where appropriate.

We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: