Who is responsible?
HUMMIN provides advisory and execution support to businesses in Kenya. For information submitted through this website, HUMMIN determines how that information is used. Questions and privacy requests can be sent to sales@hummin.org.
Information we receive
- Enquiries
- your name, business, email address and the message you send.
- Business Assessment
- your name, business, email address, goal, assessment score and the priorities or cost estimates generated from your answers when you request an emailed copy. Your results are estimates, not independently audited financial information.
- Appointments
- your name, email address, phone number if provided, selected time, invitation details and Google Meet link.
- Notes from HUMMIN
- your email address and subscription or unsubscribe status.
- Website operation
- aggregated page-visit counts by page and broad referral category, plus the security and operational information our hosting, email and anti-abuse services need to process requests.
- HUMMIN team access
- account identity, authentication and activity records for authorised staff using the administration area.
Please avoid sending sensitive personal information, passwords, identification documents or confidential third-party records through open enquiry forms or assessment answers.
What we use it for
We use information to respond to questions you initiate, provide your requested assessment results, arrange and manage consultations, send booking confirmations and reminders, manage an ongoing business relationship, operate the website and protect it against misuse.
For those activities we rely, as applicable, on taking steps you request before a business relationship, fulfilling agreed services, and our legitimate interest in managing enquiries and keeping services secure. Where consent is required for a particular activity, we ask for it separately.
Newsletters are optional. Requesting an assessment, enquiring, or booking does not automatically subscribe you. Notes from HUMMIN is sent only after you confirm a separate subscription, and each edition includes an unsubscribe option.
Providers and international processing
We use Cloudflare for website hosting, security and database services; Google Calendar and Meet for appointments; and Resend to send transaction and subscription emails. These providers receive only information needed for the relevant task. Appointment invitations share the details of the booking with the invited attendee through Google Calendar.
Some providers may process or store information outside Kenya. Cross-border processing is subject to applicable data protection requirements and safeguards. We do not sell the personal information submitted through these forms.
How long information is kept
We keep enquiry and assessment information while it is needed to answer you, provide the service you requested, and maintain appropriate business records. Appointment records and related messages are kept as needed to administer meetings and resolve changes or disputes. Newsletter records are maintained while you remain subscribed or as necessary to honour an unsubscribe request. Security records are reviewed and deleted when no longer required.
Retention depends on the purpose, any ongoing relationship, and legal or record-keeping obligations. You may ask us to review or delete information that is no longer needed. We cannot always delete records immediately when a legal obligation or live service requirement requires their retention.
Your choices and rights
Kenya's Data Protection Act provides rights relating to notice, access, correction, objection and deletion. Other rights may apply depending on the circumstances. You can ask us what personal information we hold, request correction or deletion, object to a use, or withdraw consent where processing depends on it.
Email sales@hummin.org with “Privacy request” in the subject. We may need to verify your identity before acting on the request. You may also raise concerns with Kenya's Office of the Data Protection Commissioner.
Changes to this notice
We may revise this notice when our services or data practices change. The date at the top shows the current version. Material changes will be reflected here.