Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how Build Compliance 360 ("we", "us", "our") collects, uses, discloses and protects personal data when you use our website at buildcompliance360.com or otherwise contact us. It is prepared with regard to the Data Protection Act, 2019 (Kenya) and its subsidiary regulations, which govern the processing of personal data in Kenya.

This document is provided as a general template reflecting common requirements under Kenyan law and is not a substitute for advice from a licensed Kenyan advocate. Build Compliance 360 should have this reviewed and, where necessary, adapted by a qualified legal professional before relying on it.

1. Who we are

Build Compliance 360 is a construction, land and regulatory compliance consultancy operating in Kenya, serving clients primarily in Kiambu, Nairobi, Murang'a and Nakuru counties. For the purposes of the Data Protection Act, 2019, Build Compliance 360 acts as the data controller in respect of personal data collected through this website.

You can reach us at enquiries@buildcompliance360.com or +254 719 222226 for any question about this policy or your personal data.

2. What personal data we collect

We collect personal data that you provide directly to us, primarily through our contact and enquiry form. This may include:

Your name
Phone number
Email address
County and general location of your property or project
The service you are enquiring about and a description of your situation
Any documents you choose to upload or send us relating to your enquiry
Messages sent via WhatsApp, email or phone, and the metadata associated with them

We do not knowingly collect sensitive categories of personal data (such as health or biometric data) unless you volunteer it as part of describing your enquiry, and we ask that you avoid sharing sensitive personal data with us unless it is genuinely necessary.

3. Why we process your data

Under the Data Protection Act, 2019, personal data may only be processed where a lawful basis exists. We process your personal data on the following bases:

Consent: where you submit an enquiry or contact us directly, you consent to us using your details to respond to that enquiry.
Performance of a contract: where we are engaged to provide consultancy services, we process data necessary to deliver those services.
Legitimate interests: such as maintaining records of enquiries, improving our services, and ensuring the security of our website, provided this does not override your rights and freedoms.
Legal obligation: where processing is required to comply with applicable Kenyan law.

4. How we use your data

To respond to enquiries and provide the consultancy services you request
To communicate with you about your application, property or project
To maintain internal records of client engagements
To improve our website and services
To comply with legal or regulatory obligations where applicable

5. Sharing your data

We do not sell personal data. We may share personal data in limited circumstances, including:

With relevant county or national government offices, banks or other third parties only where necessary to progress your specific enquiry, and generally with your knowledge and consent (for example, when following up on an application on your behalf).
With service providers who support our operations, such as website hosting or email providers, under obligations of confidentiality.
Where required by law, regulation, or a valid order of a Kenyan court or authority.

6. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting or reporting requirements. Enquiry and engagement records are typically retained for the duration of an active matter and a reasonable period afterward, after which they are securely deleted or anonymised.

7. Your rights under the Data Protection Act, 2019

As a data subject under Kenyan law, you have the right to:

Be informed of the use to which your personal data is to be put
Access your personal data that we hold
Request the correction of inaccurate or outdated personal data
Request the deletion of your personal data, subject to legal exceptions
Object to the processing of your personal data in certain circumstances
Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), the body responsible for enforcing the Data Protection Act, 2019, if you believe your rights have been infringed

To exercise any of these rights, contact us at enquiries@buildcompliance360.com. We will respond within a reasonable time in line with our obligations under the Act.

8. Cookies and website analytics

Our website may use limited functional cookies necessary for it to operate correctly, and may use analytics tools to understand general, aggregated usage of the site. We do not use these tools to build detailed profiles for advertising purposes. You can control or disable cookies through your browser settings; doing so may affect some website functionality.

9. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, consistent with our obligations under the Data Protection Act, 2019. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International data transfers

Where personal data is processed or stored using service providers located outside Kenya (for example, cloud hosting infrastructure), we take steps to ensure such transfers comply with the cross-border data transfer requirements of the Data Protection Act, 2019, including verifying that appropriate safeguards are in place.

11. Children's privacy

Our services are intended for adults dealing with property, construction and compliance matters. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

13. Contact us

If you have questions about this Privacy Policy or how we handle your personal data, contact us at enquiries@buildcompliance360.com or +254 719 222226. You may also refer to our Terms & Conditions.