Privacy Policy

PRIVACY POLICY

Last updated: 20 August 2026

This Privacy Policy explains how Construction ADR Hub collects, uses, stores and protects personal information when you visit this website, submit an enquiry, purchase a digital product or request product support.

1. Who we are

Construction ADR Hub is operated by Mary Mbugua, trading as Construction ADR Hub, in Kenya.

For the personal information described in this policy, Mary Mbugua trading as Construction ADR Hub is the data controller. References to “Construction ADR Hub”, “we”, “us” and “our” have the same meaning.

Privacy enquiries may be submitted through the Contact page on this website.

2. Information we collect

We may collect the following categories of personal information.

Information you provide directly

This may include:

• Your name and email address
• Your organisation and country
• The subject and contents of an enquiry
• An order or purchase reference
• Information included in product-support correspondence
• Any other information you choose to provide

Please do not submit confidential project documents, privileged communications, sensitive personal information or detailed dispute information through the website contact form.

Purchase and transaction information

When you purchase a digital product, we may receive limited customer and order information from the checkout provider, such as:

• Your name and email address
• Your billing country
• The product purchased
• The transaction date and status
• Your order reference
• Information required to deliver the product or provide support

Payments are processed through the third-party checkout provider identified at checkout. Construction ADR Hub does not receive or store your complete payment-card details.

Website and analytics information

When you visit the website, Google Sites and Google Analytics may collect information such as:

• Your browser and device type
• Pages visited and actions taken
• Date, time and duration of visits
• Referring website or traffic source
• Approximate location
• Cookie or device identifiers
• Technical information required for website security and operation

This information is generally used in aggregated form to understand how the website is used and to improve its content and performance.

3. How we collect information

We may collect personal information:

• Directly from you when you complete the contact form, communicate with us or request support
• When you purchase or download a product
• Automatically through Google Sites, Google Analytics, cookies and similar technologies
• From the checkout or payment provider where this is necessary to deliver a purchase or provide support

4. Why we use personal information

We use personal information only where we have a lawful and appropriate reason to do so.

Responding to enquiries

We use the information submitted through the contact form to respond to your enquiry and provide requested information. This processing is based on taking steps at your request and our legitimate interest in responding to genuine enquiries.

Processing purchases and delivering products

We use customer and order information to administer purchases, deliver digital products, provide support and manage product-related communications. This processing is necessary to perform the relevant transaction or contract.

Maintaining business records

We may retain transaction, correspondence and support records to comply with accounting, tax, legal and regulatory requirements.

Website security and fraud prevention

We may process limited technical and transaction information to protect the website, prevent misuse, investigate suspected fraud and maintain the security of our systems.

Website analytics and improvement

We use analytics information to understand website use, identify technical problems and improve our content and products. Where applicable law requires consent for analytics cookies, analytics should operate only after the required consent has been obtained.

Marketing

Information submitted through the contact form will not automatically be added to a marketing list. If Construction ADR Hub introduces an email newsletter or marketing list, you will be given a separate opportunity to subscribe and may unsubscribe at any time.

5. Cookies and Google Analytics

This website is hosted on Google Sites and uses Google Analytics. Google services may use cookies and similar technologies to operate the website, remember preferences, measure traffic and provide security.

Google Analytics may process cookie identifiers, device and browser information, website interactions and approximate location information. Google states that Google Analytics does not log or store individual IP addresses.

Depending on your location, Google Sites may display a cookie notice or consent dialogue relating to Google cookies and Google Analytics.

You can also manage or block cookies through your browser settings. Blocking some cookies may affect how certain website features operate.

Further information is available in the Google Privacy Policy and Google Analytics privacy guidance.

6. When we share information

We may share personal information only where this is reasonably necessary with:

• Google, which provides Google Sites, Google Forms, Google Analytics, email and cloud-storage services
• The checkout, payment or merchant-of-record provider used to process digital purchases
• Technology and professional-service providers supporting website, accounting, legal, security or administrative functions
• Government authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law
• A successor or purchaser if the business or its relevant assets are transferred, subject to appropriate confidentiality and legal requirements

Digital purchases may be processed through Lemon Squeezy, which acts as the merchant of record and handles payment, tax, billing, fraud and refund information under its own Privacy Policy.

Construction ADR Hub does not sell or rent personal information to third parties.

7. International data transfers

Construction ADR Hub is based in Kenya, but some service providers operate or store information in other countries.

As a result, personal information may be processed outside Kenya or outside the country where you live. Where required, we take reasonable steps to use providers and safeguards intended to protect personal information in accordance with applicable data-protection requirements.

Third-party providers may also process information under their own privacy policies and international-transfer arrangements.

8. How long we retain information

We retain personal information only for as long as it is reasonably required for the purpose for which it was collected or to comply with legal obligations.

Our general retention periods are:

• Contact enquiries: up to 24 months after the last substantive communication
• Product-support correspondence: up to 24 months after the matter is closed
• Customer, transaction and accounting records: generally five years after the transaction, or longer where required by law or an unresolved claim
• Analytics data: according to the retention period configured in Google Analytics, generally no longer than 14 months for user-level analytics data
• Marketing information: until consent is withdrawn or the person unsubscribes

We may retain information for longer where this is necessary to establish, exercise or defend legal claims, investigate fraud or comply with a lawful requirement.

9. How we protect information

We use reasonable administrative, technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

These measures may include access controls, password protection, secure third-party services, restricted account access and regular review of stored information.

No internet transmission or electronic-storage system is completely secure. We therefore cannot guarantee absolute security.

10. Your data-protection rights

Depending on the law that applies to you, you may have the right to:

• Be informed about how your personal information is used
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of personal information
• Request restriction of processing
• Object to certain processing
• Request transfer or portability of eligible information
• Withdraw consent where processing is based on consent
• Complain to an appropriate data-protection authority

These rights may be subject to lawful exceptions. For example, we may need to retain transaction records where this is required by tax, accounting or legal obligations.

To exercise a right, submit a request through the Contact page. We may ask for information reasonably necessary to confirm your identity before acting on the request.

Construction ADR Hub does not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

11. Children’s information

This website and its products are intended for construction professionals and organisations. They are not directed at children.

Construction ADR Hub does not knowingly collect personal information from children through this website. If you believe that a child has submitted personal information, contact us so that the matter can be reviewed and the information deleted where appropriate.

12. Third-party websites and services

This website may contain links to third-party websites, checkout services or other online resources.

Construction ADR Hub is not responsible for the privacy practices, content or security of third-party services. You should review the privacy notice of the relevant provider before submitting personal information.

13. Changes to this policy

We may update this Privacy Policy when our website, products, service providers or legal obligations change.

The updated policy will be posted on this page and the “Last updated” date will be revised. Material changes may also be communicated through an appropriate additional notice.

14. Contact and complaints

For questions, requests or complaints concerning personal information, use the Contact page on this website and select the most relevant enquiry option.

We will acknowledge and respond to privacy-related enquiries within a reasonable period.

Individuals in Kenya may also submit a complaint to the Office of the Data Protection Commissioner.

Individuals in another jurisdiction may have the right to contact the data-protection or supervisory authority responsible for their location.