Privacy Policy

1. Who We Are

Jenga Savannah Limited is a construction cost management firm registered in Kenya. We provide independent construction cost oversight, escrow management, and construction monitoring services to clients building in Kenya, including members of the Kenyan diaspora.

For the purposes of the Kenya Data Protection Act 2019, Jenga Savannah Limited is the Data Controller responsible for your personal data.

Contact: projects@jengasavannah.com | +254 142 253 952 | Nairobi, Kenya

2. Data We Collect

2.1 Information You Provide Directly

• Full name and contact details (email address, phone number)
• Country of residence
• Project details including location, type, stage, and estimated budget
• Financial information related to your construction project
• Communications sent to us via email, WhatsApp, or our contact form
• Login credentials for our client portal

2.2 Information Collected Automatically

• Browser type and device information
• IP address and approximate location
• Pages visited and time spent on our website
• Referral source (how you found our website)

2.3 Information From Third Parties

• Information shared by your appointed escrow manager in connection with your project
• Information shared by contractors or third parties in the course of delivering our services

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and manage our construction oversight and escrow coordination services
• To create and manage your client portal account
• To communicate with you about your project, including site reports and milestone updates
• To respond to enquiries and book consultations
• To comply with our legal and regulatory obligations under Kenyan law
• To improve our website and services
• To send you relevant updates about Jenga Savannah where you have consented to receive them

4. Legal Basis for Processing

Under the Kenya Data Protection Act 2019, we process your personal data on the following grounds:

• Contract performance — processing is necessary to deliver the services you have engaged us for
• Legitimate interests — processing is necessary for the operation of our business in a way that does not override your rights
• Legal obligation — processing is required to comply with applicable Kenyan law
• Consent — where you have specifically agreed to a particular use of your data, such as marketing communications

5. Data Sharing

We share your personal data only where necessary and only with:

• Independent escrow manager — to coordinate fund management and milestone-linked disbursements for your project
• Licensed quantity surveyors — assigned to carry out site visits and produce reports in connection with your project
• Secure technology systems — we use secure, industry-standard digital infrastructure to store and manage your data, maintained in accordance with applicable data protection standards
• Regulatory authorities — where required by Kenyan law or a lawful order

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

6. Data Storage and Security

Your data is stored on secure cloud infrastructure with servers that may be located outside Kenya. By using our services, you consent to this transfer. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including:

• Role-based access controls on our client portal
• Encrypted data transmission (HTTPS)
• Password-protected client accounts
• Restricted internal access to personal data

7. Data Retention

We retain your personal data for as long as necessary to deliver our services and comply with our legal obligations. Specifically:

• Client project records are retained for a minimum of 7 years following project completion, in accordance with standard professional practice and Kenyan legal requirements
• Enquiry and contact data is retained for 2 years where no contract is entered into
• Portal login data is retained for the duration of your active account and deleted within 90 days of account closure upon request

8. Your Rights

Under the Kenya Data Protection Act 2019, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data where there is no lawful reason for us to continue processing it
• Right to restrict processing — to request that we limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at projects@jengasavannah.com. We will respond within 21 days.

9. Cookies

Our website may use cookies and similar tracking technologies to improve your browsing experience and analyse site traffic. You may disable cookies through your browser settings, though this may affect the functionality of certain features on our site.

10. Children's Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately at projects@jengasavannah.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify registered clients of material changes via email or through the client portal. The effective date at the top of this page will always reflect the most recent version.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.

© 2026 Jenga Savannah Limited. All rights reserved. This document is governed by the laws of the Republic of Kenya.