1. Introduction

Welcome to Bonvic Drilling Limited. This Privacy Policy explains how we collect, use, protect and share your personal information when you use our drilling services, visit our website, or interact with us in any capacity.

Bonvic Drilling Limited, referred to here as we, our or us, is committed to protecting your privacy and to being transparent about how we handle your data. This policy applies to all personal information we collect through our website, service consultations, project execution and customer communications.

2. Information We Collect

2.1 Information you provide directly

• Contact information. Name, phone number, email address, physical address.
• Project details. Property information, drilling requirements, site specifications.
• Business information. Company name and business registration details for commercial clients.
• Payment information. Billing address and payment method details, processed securely.
• Communication records. Emails, phone calls, messages and consultation notes.

2.2 Information collected automatically

• Website usage. IP address, browser type, pages visited, time spent on the site.
• Device information. Device type, operating system, unique device identifiers.
• Location data. General geographic location, used to determine service areas.
• Technical data. Access times, referring website addresses, system configuration.

2.3 Information from third parties

• Property records. Publicly available land registry information.
• Geological data. Publicly available geological survey information.
• Referral information. Information provided by referring clients or partners.

3. How We Use Your Information

3.1 Service related uses

• Conducting site assessments and hydrogeological surveys
• Planning and executing drilling projects
• Installing pumping systems and water storage solutions
• Providing maintenance and support services
• Ensuring compliance with regulations and permit conditions

3.2 Business operations

• Processing payments and managing accounts
• Maintaining accurate project records
• Improving our services and operations
• Training our staff and maintaining quality standards
• Conducting customer satisfaction surveys

4. Information Sharing and Disclosure

4.1 We share information with

• Service partners. Geological survey companies, equipment suppliers, certified contractors.
• Government authorities. The Water Resources Authority, NEMA and county governments, for permit compliance and borehole registration.
• Professional advisors. Lawyers, accountants and insurance providers, as necessary.
• Payment processors. Banks and payment gateway providers, for transaction processing.

4.2 We do not share information for

• Marketing purposes by third parties
• Sale to data brokers or marketing companies
• Unrelated commercial purposes
• Personal gain or unauthorised use

5. Data Security

5.1 Security measures

• Physical security. Secured office premises with controlled access.
• Digital security. Encrypted data storage and secure backup systems.
• Access controls. Employee access limited on a need to know basis.
• Regular updates. Software and security systems kept current.
• Staff training. Regular privacy and security training for all employees.

5.2 Data retention

We retain personal information only as long as necessary to fulfil the purposes set out in this policy. In practice that usually means:

• Active projects. The duration of the project plus 2 years.
• Financial records. 7 years, for tax and accounting purposes.
• Marketing communications. Until you opt out or withdraw consent.
• Legal requirements. As mandated by Kenyan law.

6. Your Rights and Choices

6.1 Your rights include

• Access. Request a copy of the personal information we hold about you.
• Correction. Request correction of inaccurate or incomplete information.
• Deletion. Request deletion of your personal information, subject to legal requirements.
• Objection. Object to certain uses of your personal information.
• Portability. Request transfer of your data to another service provider.
• Withdrawal. Withdraw consent for marketing communications at any time.

6.2 How to exercise your rights

To exercise any of these rights, contact us using the details in the Contact section below. We will respond within 30 days and may ask you to verify your identity first, to make sure we are not handing your data to someone else.

7. Cookies and Website Tracking

7.1 Types of cookies we use

• Essential cookies. Required for the website to function.
• Analytics cookies. Help us understand how the site is used.
• Preference cookies. Remember your settings and preferences.
• Marketing cookies. Used to deliver relevant content.

7.2 Managing cookies

You can control cookies through your browser settings. Disabling some cookies may affect how parts of the website work.

8. Children’s Privacy

Our services are not directed to children under 18 and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately so we can delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Giving notice at your next service interaction

The Last Updated date at the top of this policy shows when the most recent changes were made.

10. Compliance with Kenyan Law

This Privacy Policy is designed to comply with the Kenya Data Protection Act, 2019 and other applicable Kenyan privacy laws. Our data processing is guided by the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and accountability.