Privacy Policy

Lusam Group of Companies ("Lusam Group", "we", "us", or "our") is a company registered in Kenya, providing professional Gospel sound services, audio and visual equipment rentals, and equipment sales. Our registered address is Nairobi, Kenya. You can contact our Data Controller at info@lusamgroup.co.ke.

We collect only the information necessary to provide our services: • Contact & Booking Information: Your name, phone number, and email address when you submit a booking or contact form. • Transaction Data: Equipment booked or purchased, rental dates, and payment status (processed through our booking system). • Usage Data: Pages visited, browser type, and IP address collected automatically via standard web server logs (used for security and analytics only). • Cookies: We use essential cookies to keep the booking system functional. No advertising or tracking cookies are used.

We use your data exclusively to: • Process and manage your equipment bookings and purchases • Send booking confirmations and event reminders via email or SMS • Respond to your enquiries and provide customer support • Improve our website and services based on aggregated, anonymised analytics • Comply with our legal obligations under Kenyan law (the Data Protection Act, 2019)

We process your personal data on the following lawful grounds: • Contract: Processing is necessary to fulfil a booking or purchase contract with you. • Legitimate Interests: To improve our services and prevent fraud. • Consent: Where we send marketing communications, we will obtain your prior consent and you may withdraw it at any time.

We do not sell, rent, or trade your personal information. We may share data with: • Supabase (our database provider, hosted on AWS) — under strict data processing agreements ensuring GDPR-equivalent protections. • Payment processors — only the minimum data required to complete transactions. • Law enforcement or regulators — only if required by Kenyan law or a valid court order. All third parties are contractually obligated to protect your data and use it only for the specified purpose.

We retain your personal data only as long as necessary: • Booking records: 7 years (statutory requirement for business records in Kenya). • Contact enquiries: 2 years from last contact. • Account data: Until you request deletion. After the retention period expires, data is securely deleted or anonymised.

Under the Kenya Data Protection Act, 2019, you have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete data • Delete your data ("right to be forgotten"), subject to legal retention requirements • Object to processing based on legitimate interests • Data Portability: Receive your data in a machine-readable format • Lodge a complaint with the Office of the Data Protection Commissioner (Kenya) To exercise any right, contact us at info@lusamgroup.co.ke. We will respond within 30 days.

We implement industry-standard security measures to protect your data: • All data is transmitted over HTTPS (TLS encryption) • Our database (Supabase) enforces row-level security and is access-controlled • Admin access requires authenticated login credentials • We conduct regular security reviews of our systems Despite these measures, no internet transmission is 100% secure. We will notify you of any data breach that affects your rights within 72 hours of becoming aware, as required by law.

We use only essential cookies required for the website to function correctly. These cookies do not track you across other websites and are deleted when you close your browser (session cookies) or expire within a short, defined period. You can disable cookies in your browser settings, but some booking features may not work correctly without them.

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data: Lusam Group of Companies Email: info@lusamgroup.co.ke Phone: +254 700 000 000 Address: Nairobi, Kenya