Privacy Policy

1.Who we are

Gervlink Solutions is a technology business serving customers in Kenya, including customers in and around Kisumu.

For the purposes of applicable Kenyan data-protection law, Gervlink Solutions may act as a data controller when determining how and why personal information submitted through our website is processed.

Our website is www.gervlinksolutions.com. For privacy-related questions or requests, you may contact us through our Contact page.

2.Information we collect

When you submit an enquiry through our contact form, we may collect:

• Your name
• Your telephone number
• Your email address, where provided
• The service you are enquiring about
• The contents of your message

The message field is free text. Please do not include passwords, PINs, payment-card information, national identification numbers, or other sensitive information unless it is specifically necessary and we have requested it through an appropriate secure channel.

Our website also processes your IP address for security and anti-abuse purposes, including rate limiting, duplicate-submission detection, and protection against automated spam.

3.Information we do not collect

Our website does not operate:

• User accounts
• Login or registration systems
• Online payment or checkout systems
• A customer database within the website itself
• Newsletter subscriptions
• File-upload forms
• Booking forms

The product search on our sales page runs entirely in your browser. Your search terms are never transmitted to us and are not stored.

4.How we use your information

We may use information submitted through our website to:

• Respond to your enquiry
• Contact you regarding the service or assistance you requested
• Understand the nature of your technical or service request
• Provide quotations or other information you request
• Prevent spam, abuse, duplicate submissions and fraudulent activity
• Maintain the security and reliability of our website
• Meet applicable legal or regulatory obligations

We do not sell your personal information.

5.Legal basis for processing

Where required by applicable law, we process personal information on an appropriate lawful basis, which may include:

• Your consent
• Taking steps at your request before entering into an agreement
• Performing or preparing to perform a contract
• Compliance with a legal obligation
• Legitimate interests, where permitted by applicable law and where those interests are not overridden by your rights

Kenya's Data Protection Act provides several lawful bases for processing personal data, including consent, contractual necessity, legal obligations and legitimate interests.

6.Who receives your information

Information submitted through the contact form may be processed by service providers that help us operate the website and respond to enquiries. We describe these providers by the role they perform rather than by name, so that this Policy stays accurate if a provider changes. Each operates under its own terms and privacy practices.

7.Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected — responding to enquiries, maintaining appropriate business records, resolving disputes, preventing abuse, and complying with legal obligations.

Contact enquiries are delivered to our business email account. The website itself does not maintain a customer database containing those enquiries.

Temporary anti-abuse information expires automatically, within twenty-four hours at the outside. Retention periods applied by our service providers depend on their own services and policies.

We may retain information for longer where required by law, or where reasonably necessary to establish, exercise or defend legal claims.

8.Your data-protection rights

Subject to applicable law, you may have the right to:

• Be informed about how your personal data is used
• Request access to your personal data
• Request correction of inaccurate or misleading information
• Request deletion of personal information in appropriate circumstances
• Object to certain processing
• Request restriction of processing where applicable
• Request data portability where applicable
• Withdraw consent where processing is based on consent

The Office of the Data Protection Commissioner identifies these among the rights available to data subjects under Kenyan data-protection law.

To make a privacy request, contact us through our Contact page and state clearly what you are asking for. We may need to verify your identity before fulfilling certain requests.

9.Complaints

If you believe your personal information has been handled improperly, please contact us first so that we can investigate and address your concern.

You may also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), which regulates personal-data processing and protects data-subject rights in Kenya.

10.Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, misuse or destruction. These include encrypted connections, spam and abuse protection, rate limiting, and validation of everything submitted to us.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

11.Third-party services

Our website relies on third-party providers for certain functionality. They operate under their own terms, privacy policies and data-processing practices, and we do not control those practices.

Some providers may process information outside Kenya. The Data Protection Act places requirements on transfers of personal data outside Kenya, including appropriate safeguards or an applicable consent or legal basis.

12.Children's information

Our website is not specifically directed at children.

We do not knowingly request or intentionally collect children's personal information through our contact form. If you believe a child has provided personal information to us without appropriate authorisation, please contact us so that we can investigate.

13.Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing practices. When we make significant changes we will update the “Last updated” date at the top of this page.

14.Contact us

If you have questions about this Privacy Policy, your personal information, or your data-protection rights, please contact Gervlink Solutions through our Contact page. We will make reasonable efforts to respond within the timeframe required by applicable law.

See also our Terms of Service.