Privacy Policy

1. Commitment to Privacy

Highland Engineering Gusii Volttrixon ("Highland Engineering", "we", "our") respects the privacy of our clients, farmers, and institutional partners. This Privacy Policy describes how we collect, handle, and safeguard personal information in full compliance with the Kenya Data Protection Act, 2019.

2. Information We Collect

We collect only the technical and contact details necessary to perform electro-mechanical engineering services, generate diagnostic quotations, and coordinate field van dispatches:

• Contact Details: Your name, business or farm name, phone number, physical location in Western Kenya, and email address.
• Equipment Specifications: Electric motor horsepower, pump flow rates, posho mill models, generator serial numbers, and reported mechanical symptoms.
• Communication Records: WhatsApp technical inquiries, telephone call logs for emergency dispatches, and form submissions.

3. How We Use Collected Information

Your data is strictly utilized for practical engineering operations:

• Assigning technical field engineers to your farm or facility location.
• Generating itemized repair invoices, job cards, and testing certificates.
• Updating you on motor rewinding progress and equipment bench test completion.
• Validating warranty claims and post-service technical support.

4. Data Protection & Security Controls

We apply strict organizational and technical security measures to safeguard your information:

• Anti-CSRF Protection: All form transmissions are protected against cross-site request forgery through cryptographic tokens.
• Strict Sanitization: Form data is sanitized and protected against script injection.
• No Third-Party Sharing: We do not sell, license, or lease client phone numbers or email addresses to advertisers or third-party marketing brokers.

5. Cookies and Session Storage

Our website uses strictly necessary session cookies configured with the HttpOnly and SameSite=Lax security flags. These cookies exist exclusively to maintain session security and prevent CSRF attacks. We do not employ third-party tracking pixels or behavioral advertising cookies.

6. Your Rights Under Kenyan Law

Under the Kenya Data Protection Act, 2019, you have the right to request access to the personal data we maintain on your account, request corrections to your contact information, or request the deletion of historical service records once statutory tax and accounting retention requirements have expired.