Privacy Policy

Effective Date: 01-01-2026

Hanmak Technologies Limited (“Hanmak”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Kenya Data Protection Act (DPA) 2019 and guidelines from the Office of the Data Protection Commissioner (ODPC).

By using our website or submitting information through the Hanmak Referral Program, you consent to the practices described in this policy.

1. Who We Are

Hanmak Technologies Limited
Website: https://www.hanmak.co.ke
We provide healthcare technology solutions, including the Hanmak Referral Program, which allows individuals to refer potential clients to us.

2. Personal Data We Collect

We collect the following categories of personal data:

a. Information You Provide Directly

      • Information submitted through the Referral Program form (e.g. your name, contact details, and referral details).
      • Comments submitted on our website.
      • Uploaded media files such as images.

b. Automatically Collected Data

      • IP address, browser type, device details, and interaction logs for security and analytics.
      • Cookies used for authentication, site preferences, and improving your website experience.

c. Third-Party Linked Services

If you use features like Gravatar or interact with embedded content (e.g. YouTube videos, external articles), those third-party services may collect additional data according to their own privacy policies.

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

3. How We Use Your Data

We process your personal data for the following purposes:

  • To validate and manage referral submissions.
  • To communicate with you about the referral or other inquiries.
  • To maintain and improve website functionality.
  • To detect and prevent fraud, spam, or security incidents.
  • To comply with legal and regulatory requirements under the DPA.

We will not use your data for purposes beyond what you have been informed about unless permitted by law.

4. Legal Basis for Processing

We process your personal data based on one or more of the following lawful grounds:

  • Consent: When you voluntarily submit referral information or comments.
  • Legitimate Interest: To improve our services and protect the website from fraud or abuse.
  • Legal Obligation: When required to comply with Kenyan laws and regulations.

5. Cookies

We use cookies to enhance your experience. Cookies may:

  • Store your login preferences.
  • Remember your display settings.
  • Help detect spam and enhance security.

You can manage or disable cookies through your browser, but some site functions may not work correctly afterward.

6. How Long We Keep Your Data

  • Referral submissions: Retained as long as necessary for verification, reward processing, compliance, and business purposes.
  • Comments: Retained indefinitely for moderation and continuity.
  • Registered user accounts (if applicable): Retained until the user deletes or requests deletion.
  • Log and security data: Retained as required for security monitoring and legal compliance.

7. Who We Share Your Data With

We only share your data when necessary:

  • Service providers supporting website functionality or spam detection.
  • Internal teams involved in referral program processing.
  • Legal or regulatory authorities when required by law.

We do not sell your personal data to third parties.

8. Your Rights Under the DPA

You have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Correction: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data where applicable.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Data Portability: Request your data in a structured, commonly used format.
  • Right to Withdraw Consent: At any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at info@hanmak.co.ke.

9. Data Transfer and Storage

Data may be processed on secure servers within Kenya or in jurisdictions offering adequate data protection standards. Any transfer of data outside Kenya will follow ODPC-approved safeguards.

10. Security Measures

We use technical and organizational safeguards to protect your information, including encryption, access controls, and secure storage. However, no system is fully immune to risks, and we encourage responsible online practices.

11. Embedded Content and External Links

Content embedded from external websites behaves as though you visited those websites directly. Such sites may collect their own data, set cookies, or track interactions. We are not responsible for third-party privacy practices.

12. Changes to This Privacy Policy

We may update this Privacy Policy occasionally. The updated version will always be posted on this page with the effective date indicated at the top.

13. Contact Information

For privacy-related inquiries or to exercise your rights, contact:

Hanmak Technologies Limited
Email: info@hanmak.co.ke
Phone: 0795057377