GDPR Compliance

GDPR COMPLIANCE.

ConstructAfrica is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This GDPR Policy explains how we collect, use, store, and protect your personal data in accordance with GDPR requirements.

DATA CONTROLLER.

ConstructAfrica acts as the data controller for the personal data we collect and process. If you have any questions about this policy or how we handle your personal data, please contact us at [email protected].

LEGAL BASIS FOR PROCESSING.

We process your personal data based on the following legal grounds:

Consent: When you have given clear consent for us to process your personal data for specific purposes.

Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject.

Legitimate Interests: When processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.

YOUR RIGHTS UNDER GDPR.

As a data subject, you have the following rights:

Right of Access: You have the right to request access to your personal data and obtain information about how we process it.

Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing: You have the right to request restriction of processing of your personal data.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object: You have the right to object to processing of your personal data, including for direct marketing purposes.

Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

HOW TO EXERCISE YOUR RIGHTS.

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by up to two months, and we will inform you of any such extension.

DATA COLLECTION AND USE.

We collect and process personal data for the following purposes:

To provide and improve our services

To process your orders and manage your account

To communicate with you about our services, updates, and promotional offers

To comply with legal obligations

To protect our legitimate business interests

For more detailed information about the data we collect, please refer to our Privacy Policy.

DATA RETENTION.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, and the purposes for which we process the data.

DATA SECURITY.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

DATA TRANSFERS.

If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, or that the recipient country has been deemed to provide an adequate level of data protection.

COOKIES AND TRACKING TECHNOLOGIES.

We use cookies and similar tracking technologies to collect and store information about your preferences and usage of our website. For more information about our use of cookies, please refer to our Cookie Policy.

CHILDREN'S DATA.

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

DATA BREACH NOTIFICATION.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and in any event within 72 hours of becoming aware of the breach, where feasible.

SUPERVISORY AUTHORITY.

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with your local supervisory authority. For UK residents, this is the Information Commissioner's Office (ICO).

UPDATES TO THIS POLICY.

We may update this GDPR Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Contact Us.

If you have any questions, concerns, or requests regarding this GDPR Policy or our data processing practices, please contact us at:

Email: [email protected]

We are committed to protecting your privacy and ensuring your rights under GDPR are respected.