GLM Group Limited is dedicated to upholding the privacy of individuals and ensuring the security of all Personal Data, as defined by applicable laws, shared through interactions with the company, during employment, or via the continued use of the GLM Group Limited website. The term “Personal Data” encompasses any information pertaining to an identified or identifiable natural person, who can be directly or indirectly identified by reference to data relating to them, such as their name, identification number, location data, or factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
This Privacy Notice elucidates how GLM Group Limited (referred to as “we,” “us,” or “the Company”) may collect, utilize, share, protect, and otherwise process information, including Personal Data, obtained through interactions with the company or the use of its website.
The Company retains the prerogative to modify this Privacy Notice at any time and at its sole discretion. Notification of any amendments to the Privacy Notice will be provided as soon as feasible.
From the effective date of this Privacy Notice, all existing Personal Data held by the company will be considered lawfully collected and processed, unless the data subject requests correction or deletion of any information held.
The Company may collect Personal Data directly from individuals during their use of the Company’s website or interactions with the company, including through the provision of services or during employment, except where the law permits collection from other sources.
Additional Personal Data may be collected while supplying goods and providing services to individuals or their employers, or to others based on subsequent interactions.
Personal Data collected may include names, business contact details, job titles or positions, and addresses or locations. Furthermore, financial information may be collected when necessary.
The Company collects Personal Data when dealing with, providing, or marketing goods and services to clients or individuals employed or engaged by clients. In compliance with legal obligations, individuals are informed of the following:
The fact that their Personal Data is being collected.
The purpose for which Personal Data is collected, including the reasons for collection and intended usage.
The third parties with whom Personal Data will be shared or transferred, including details of safeguards adopted
A description of the technical and organizational security measures implemented to ensure data integrity and confidentiality.
The rights of individuals as subjects of the Personal Data collected.
The contact information of the data controller or data processor responsible for handling Personal Data.
Whether data collection is mandated by law and whether such collection is voluntary or mandatory.
The consequences of failing to provide all or any part of the requested data.
When individuals apply for employment, the Company may collect Personal Data such as names, contact details, and work history. Personal Data may also be collected from records checks, recruitment consultants, and previous employers, universities, or other sources to aid in evaluating employment applications. Applicants consent to the collection of relevant Personal Data from other sources for evaluation purposes.
In other contexts, if Personal Data is collected from sources other than the individual, notification will be provided whenever practicable.
Generally, Personal Data is collected only when voluntarily provided, such as when completing forms in the careers section, subscribing to publications, or providing details to enable performance of a sales of goods contract.
If the Personal Data is intended to be collected pursuant to any law or where the collection of such Personal Data is mandatorily required, individuals will be notified of this directly prior to collecting such data.
The Company uses cookies on its website and obtains Personal Data from IP addresses, operating systems, and web browsers used to access the website.
When individuals visit the website, the server records their IP address, date, time, and duration of the visit. This information is used to compile statistical data on website usage and to track user navigation for evaluation and improvement purposes.
The provision of Personal Data may be necessary for the use or functioning of certain website features or the provision of certain services. Failure to provide Personal Data may render such features or services non-functional or unavailable.
Collected Personal Data may be used for various purposes, including:
Onboarding employees onto company systems to enable the performance of obligations.
Providing employee benefits such as health insurance and pension schemes.
Responding to emails or online requests for products, services, or information.
Providing service communications such as bill reminders, order confirmations, program registrations, and client service messages.
Fulfilling and delivering products and services.
Processing marketing surveys.
Personalizing and improving website usability.
Tailoring content, advertising, and marketing.
Sharing Personal Data with third parties to fulfill service requests or with service providers that perform business functions.
On occasion, the Company may be required to share information with other offices and third parties providing services on its behalf. Information may also be shared with other offices for purposes of performing obligations as a client or employee. Individuals will be notified of such disclosures as soon as reasonably practicable, and Personal Data will only be disclosed with consent, when required or permitted by law, or when necessary for legal proceedings or to exercise or defend legal rights.
Email addresses may be shared with third parties as necessary for them to perform services such as packaging, mailing, delivering products, processing event registrations, and responding to service requests.
Some Personal Data may be stored in a cloud or server located within or outside Kenya and managed by a third-party service provider. Transfers of Personal Data outside Kenya will be solely for ensuring data safety and operational efficiency, with reasonable steps taken to ensure secure treatment and adequate safeguards.
The Company employs up-to-date data storage and security systems to securely hold Personal Data in electronic and physical form, protecting it from unauthorized access, improper use or disclosure, unauthorized modification, unlawful destruction, or accidental loss. IT usage and security measures are supported by various security standards, processes, and procedures.
Commercially reasonable security measures are implemented to protect against unauthorized access, alteration, disclosure, or destruction of data. However, no data transmission over the Internet can be guaranteed to be 100% secure, and the Company cannot guarantee the security of information transmitted to or from online products or services.
All individuals with access to confidential information, including Personal Data, are subject to Data Protection and confidentiality obligations.
Individuals possess certain rights regarding the Personal Data processed by the Company, including:
The right to be informed of the use to which Personal Data is put. The right to object to the processing of all or part of their Personal Data. The right to access their Personal Data. The right to correct any false or misleading parts of their Personal Data. The right to delete any false or misleading parts of their Personal Data. The right to data portability, allowing them to receive their Personal Data in a structured, commonly-used, and machine-readable format and transmit it to another data controller or data processor without hindrance. The right not to be subjected to a decision based solely on automated processing which produces legal effects that concern or significantly affect them. The right to rectify any inaccurate, outdated, incomplete, or misleading portions of their Personal Data. The right to erase or destroy any portions of their Personal Data that are irrelevant, excessive, unlawfully obtained, or that the Company is no longer authorized to retain.
In cases where consent has been provided for the collection, processing, and transfer of Personal Data for a specific purpose, individuals have the right to withdraw their consent at any time. Upon receiving notification of consent withdrawal, the Company will cease processing information for the originally agreed purpose, unless there is another legitimate basis for doing so in law.
To exercise any of these rights, individuals may contact the Company in writing via email at admin@glmgroup.co.ke
For further information regarding this Privacy Notice and its implications, individuals may contact the team at GLM Group Limited through the email address admin@glmgroup.co.ke
