Privacy Policy
This Privacy Policy explains how FULEMAO FLOORING MATERIAL TECHNOLOGY CO., LTD (“FLM Kenya”, “FLM”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you visit or interact with the FLM Kenya website, submit an enquiry or request for quotation, contact us, or otherwise use our website services.
We process personal data in accordance with applicable Kenyan data protection law, including the Data Protection Act, 2019 and applicable regulations made under it.
1. Scope and Data Controller
This Policy applies to personal data processed through the FLM Kenya website and related online interactions. For the purposes of applicable Kenyan data protection law, the website operator and relevant data controller is FULEMAO FLOORING MATERIAL TECHNOLOGY CO., LTD, located at 331 Hillcrest Drive, Nairobi, Kenya.
The website is primarily intended for users in Kenya, but it may also be accessed by users in other countries and regions.
2. Personal Data We Collect
Depending on how you use the website, we may collect: (a) identification and contact information, such as name, company name, job title, email address, telephone number and country or region; (b) enquiry and transaction-related information, such as products of interest, project requirements, quotation requests, order-related communications and after-sales enquiries; (c) information you voluntarily provide in forms, messages, applications or other communications; and (d) technical and usage information, such as IP address, browser type, device information, approximate location derived from technical data, pages viewed, referral source, access time and cookie or similar technology data.
We do not intentionally request sensitive personal data through ordinary website enquiry forms. Please do not submit sensitive personal data unless it is necessary and specifically requested for a lawful purpose.
3. How We Collect Personal Data
We may collect personal data directly from you when you complete a form, request a quotation, contact us, subscribe to communications or otherwise interact with us. We may also collect limited technical information automatically through cookies, server logs and similar technologies, and may receive business contact information from authorized distributors, service providers, affiliates or other lawful sources where permitted by law.
Where personal data is obtained from another source, we will provide any notice required by applicable law where reasonably practicable.
4. Purposes and Legal Bases for Processing
We process personal data only for lawful, specific and defined purposes. These may include: responding to enquiries and quotation requests; providing product, technical, training and after-sales information; communicating about orders or potential transactions; managing distributor, dealer, franchise or business cooperation enquiries; operating, securing and improving the website; maintaining business records; preventing fraud, misuse and security incidents; complying with legal and regulatory obligations; and, where permitted, sending relevant marketing communications.
Depending on the circumstances, processing may be based on your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, or another lawful basis recognized under Kenyan law. Where consent is the applicable basis, you may withdraw it subject to applicable law, without affecting processing already lawfully carried out before withdrawal.
5. Disclosure to Affiliates, Headquarters and Service Providers
To the extent necessary for the purposes described in this Policy, personal data may be accessed by or disclosed to authorized FLM personnel, FLM headquarters or affiliated companies, including authorized personnel located outside Kenya, where such access is required for quotation support, product or technical support, supply-chain coordination, customer service, website administration, business management or other legitimate business functions.
We may also use service providers for website hosting, IT support, analytics, communications, logistics, customer management, security or other business functions. Such recipients are expected to process personal data only for authorized purposes and subject to appropriate confidentiality, security and contractual requirements.
We may disclose personal data where required by law, a lawful request of a competent authority, or where reasonably necessary to establish, exercise or defend legal rights.
6. Cross-Border Transfers
Because FLM operates internationally, personal data may be accessed from or transferred to countries outside Kenya, including where authorized headquarters personnel, affiliates or service providers are located outside Kenya.
Where personal data is transferred outside Kenya, we will take measures required by applicable Kenyan law to ensure an appropriate level of protection. Depending on the circumstances, this may include appropriate safeguards, contractual arrangements, another lawful transfer mechanism, or explicit consent where required. Sensitive personal data will be transferred outside Kenya only where the applicable legal requirements are satisfied.
8. Direct Marketing
Where permitted by law, we may use your contact information to send information about FLM products, services, events, training or relevant business opportunities. Where consent is required, we will obtain it before sending such communications.
You may opt out of marketing communications at any time using the unsubscribe method provided in the communication or by contacting us. Opting out of marketing does not prevent us from sending necessary transactional or service communications.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, managing business relationships, fulfilling contractual or legal obligations, maintaining records, resolving disputes and protecting legal rights. Retention periods may vary depending on the nature of the data, the relationship and applicable legal requirements.
When personal data is no longer required, we will delete, anonymize or otherwise securely dispose of it in accordance with applicable requirements and our retention practices.
10. Data Security and Personal Data Breaches
We use reasonable and appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful access, use, alteration, disclosure, loss or destruction, taking into account the nature of the data, the risks involved and available technology.
If a personal data breach occurs, we will take reasonable measures to contain and address the incident and will make notifications to the Data Commissioner and affected data subjects where and within the timeframes required by applicable Kenyan law.
11. Your Data Protection Rights
Subject to applicable Kenyan law and any lawful limitations, you may have the right to be informed about the use of your personal data; access personal data we hold about you; object to certain processing; request correction of false or misleading data; request deletion of data that is false, misleading or otherwise subject to deletion under law; request restriction of processing where applicable; and exercise rights relating to data portability or automated decision-making where applicable.
To exercise a right, please contact us using the details in Section 15. We may take reasonable steps to verify your identity before responding. Rights requests will be handled in accordance with applicable law.
Where provided by law, you may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya regarding the processing of your personal data.
12. Children’s Personal Data
The website is intended for business and professional users and is not directed to children. We do not knowingly seek to collect personal data from children through ordinary website functions.
If processing of a child’s personal data becomes necessary, we will apply the consent, verification and protection requirements required by Kenyan law. If you believe a child has provided personal data to us inappropriately, please contact us.
13. Third-Party Websites and Services
The website may contain links to third-party websites, social media platforms, maps, videos or other services. We do not control the privacy practices of independent third parties. Their processing of personal data is governed by their own privacy notices and terms.
14. Changes to this Privacy Policy
We may update this Policy from time to time to reflect changes in law, technology, website functionality or our processing practices. The revised version will be posted on the website with an updated “Last Updated” date. Where required by law, we will provide additional notice or obtain consent for material changes.
15. Contact Us
If you have questions about this Policy, wish to exercise a data protection right, or have a privacy concern, please contact:
Address: 331 Hillcrest Drive, Nairobi, Kenya
Email: fulemaoflooring@gmail.com
Telephone: +254 718 411 887

