Privacy Policy

How GLM Branding collects, uses and protects your personal data. Last updated 16 October 2026.

GLM Branding (“we”, “us”) respects your privacy. This policy explains what personal data we collect through glmgroup.co.ke, why, who sees it, how long we keep it and what rights you have under the Kenya Data Protection Act, 2019.

1. Who is responsible for your data

The data controller is GLM Branding, Ruby Mall, LG 06, Junction of Charles Rubia Road and Kenneth Matiba Road, opposite Diamond Trust Bank, Nairobi, Kenya. You can contact us about anything in this policy at info@glmgroup.co.ke or on +254 797 673225.

2. What we collect

Enquiries. When you use the contact form we collect your name, email address, the service you are asking about and the message you write. If you send us an estimate from the DTF gang-sheet builder, we also receive the sheet length, design sizes and quantities and the estimated price that the builder puts into your message.
Newsletter. If you sign up for updates we collect your email address.
WhatsApp. If you message us on WhatsApp we receive your phone number, your profile name and the messages you send. WhatsApp (Meta) processes that data under its own terms and privacy policy.
Artwork. Files you add to the gang-sheet builder stay in your own browser and are not uploaded to us. If you later email or send us artwork, we use it only to quote for and produce your order.
Technical data. Like most websites, our servers and our security and delivery provider (Cloudflare) automatically record technical information such as your IP address, browser type, the pages requested and the time. We use it to keep the site working and secure.
Cookies. We do not use advertising or tracking cookies. A login cookie is set only for our staff when they sign in to manage the site; ordinary visitors do not receive it.

We do not knowingly collect special categories of personal data, and the site is not aimed at children under 18.

3. Why we use your data, and our legal basis

To reply to your enquiry and prepare a quote — steps you ask us to take before entering a contract.
To fulfil an order you place with us — performance of a contract.
To send you the newsletter — your consent, which you can withdraw at any time.
To keep the website secure, prevent spam and abuse, and keep records — our legitimate interests in running a safe business — and to meet legal obligations such as tax and accounting rules.

We do not sell your personal data and we do not use it for automated decisions that significantly affect you.

4. Who we share it with

We share personal data only with service providers who help us run the site and the business, and only as needed:

our web hosting provider (hosting.com), which stores the website and the enquiries you submit;
Cloudflare, which delivers the site quickly and protects it from attack;
the email or notification service we use to receive your enquiries and send the newsletter;
our professional advisers (for example accountants and lawyers), and public authorities where the law requires it.

These providers act on our instructions and must protect your data.

5. Transfers outside Kenya

Some of our providers store or process data on servers outside Kenya. Where that happens we rely on providers that apply appropriate security safeguards and, where the law requires it, on your consent or another lawful transfer mechanism.

6. How long we keep it

Enquiries: up to 24 months after your last contact with us, unless you ask us to delete them sooner.
Newsletter addresses: until you unsubscribe or ask us to remove you.
Order and accounting records: for as long as the law requires.
Server and security logs: for a short period, then deleted or overwritten.

7. How we protect it

The site uses HTTPS encryption, the management area is password-protected, forms are protected against spam and repeated attempts, access is limited to staff who need it, and we keep backups. No system is completely secure, but we work to keep your data safe and will notify you and the Data Protection Commissioner of a breach where the law requires it.

8. Your rights

Under the Data Protection Act you have the right to:

be told how your data is used (this policy);
ask for a copy of the personal data we hold about you;
ask us to correct data that is wrong or incomplete;
ask us to delete your data;
object to, or ask us to restrict, certain uses of your data;
withdraw your consent at any time (for example by asking us to stop sending the newsletter). This does not affect what we did before you withdrew it.

To use any of these rights, email info@glmgroup.co.ke. We may need to confirm who you are first, and we will reply without undue delay and within the time the law allows.

9. Complaints

If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change we will say so on this page.