Global Impact & Carbon Consulting Limited (“GCCL”, “we”, “our” or “us”) respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, contact us or engage with our services.

Our handling of personal information is intended to comply with applicable data protection laws in Kenya, including the Data Protection Act, 2019.

1. Information We Collect

We may collect personal information that you voluntarily provide when you complete a contact form, email or telephone us, request information about our services, engage us to provide professional services, or apply for a position or collaboration where applicable.

This information may include:

• Your name and contact details.
• Your email address and telephone number.
• Your organisation and job title.
• The contents of your enquiry or correspondence.

When you visit our website, certain technical information may also be collected, including your IP address, browser type, device information, pages visited and general website usage data. The information collected depends on the website features and tools in use.

2. How We Use Your Information

We may use personal information to:

• Respond to enquiries and requests for information.
• Communicate with existing and prospective clients.
• Prepare proposals and deliver consulting services.
• Manage client relationships and business operations.
• Operate, maintain, secure and improve our website.
• Meet legal, regulatory and contractual obligations.
• Protect our legitimate business interests and address disputes where necessary.

We seek to use personal information only for appropriate purposes and where a lawful basis for processing exists.

3. Legal Basis for Processing

Depending on the circumstances, we may process personal information where necessary to take steps at your request before entering into a contract, perform a contract, comply with a legal obligation, pursue a legitimate interest that does not override your rights, or act on consent where consent is required.

Where we rely on consent, you may withdraw it subject to applicable law. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Sharing Your Information

We do not sell your personal information. We may share information where necessary with trusted service providers who support our website, communications, information technology, hosting or business operations.

We may also disclose information where required by law, by a competent authority, to establish or defend legal claims, or to protect our rights, property, security or the safety of others.

Where information is transferred outside Kenya, we will take steps required by applicable data protection law to ensure that the transfer is lawful and appropriate safeguards are in place.

5. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, providing services, meeting legal obligations, maintaining business records and resolving disputes.

When information is no longer required, we will take reasonable steps to delete it or securely dispose of it, subject to applicable law.

6. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

7. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• Be informed about how your personal information is used.
• Request access to personal information we hold about you.
• Request correction of inaccurate or misleading information.
• Request deletion of personal information where legally applicable.
• Object to certain processing of your information.
• Withdraw consent where processing is based on consent.
• Raise a concern with the relevant data protection authority.

To exercise a right or ask a question about your information, contact us using the details below. We may need to verify your identity before responding. Some requests may be limited by legal obligations or other lawful grounds.

8. Cookies and Website Analytics

Our website may use cookies and similar technologies to support essential functionality, remember preferences, understand website traffic and improve the user experience.

Third-party services integrated into the website may also set cookies or process technical information, depending on the features enabled. These services may handle information according to their own privacy policies.

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect how parts of the website function. Where required, we will seek consent before placing non-essential cookies.

9. Third-Party Websites

Our website may contain links to third-party websites or platforms. We do not control their content, privacy practices or security. We encourage you to review the privacy policies of any third-party websites you visit.

10. Children's Privacy

Our website and professional consulting services are not intended to target children. We do not knowingly seek to collect children's personal information through this website. If you believe a child has provided personal information to us, please contact us so that we can assess the matter and take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, website features or applicable law. The updated version will be published on this page with a revised last-updated date.