This Privacy Policy ("Policy") explains how Goldberry Investments Ltd ("Goldberry", "we", "us", or "our") collects, uses, discloses, and protects personal data when you access or use our websites, platforms, and services, including Builder’s Counsel, Cost Master, and any other current or future products or services we provide (collectively, the "Services").

This Policy is intended to comply with applicable data protection laws, including the Kenya Data Protection Act, 2019, and reflects best practices for modern SaaS and AI-enabled platforms.

By accessing or using the Services, you acknowledge that you have read and understood this Policy.

Information We Collect
1. Personal Information
  We may collect personal data that you voluntarily provide, including but not limited to:
  - Full name
  - Email Address
  - Phone number
  - Company or organization details
  - Account credentials and profile information
  - Billing and payment-related information (processed via third-party payment providers)
2. Usage and Technical Data
  When you access or use the Services, we automatically collect certain information, including:
  - IP address and approximate location
  - Device type, browser type, and operating system
  - Pages viewed, features used, timestamps, and referring URLs
  - Log files, error reports, and performance metrics
3. Cookies and Similar Technologies
  We use cookies, local storage, and similar technologies to:
  - Authenticate users and maintain sessions
  - Remember preferences and settings
  - Analyse traffic and usage trends
  - Improve functionality and user experience
  You may control cookies through your browser settings. Disabling cookies may affect certain features of the Services.
4. User Content and Uploaded Data
  We collect and process content you upload or submit, such as documents, cost data, project information, or contract files, solely for the purpose of providing the Services.
How We Use Your Information
We use personal data for the following purposes:
- To provide, operate, and maintain the Services
- To create and manage user accounts
- To process payments and subscriptions
- To communicate service-related notices, updates, and security alerts
- To provide customer support
- To improve, develop, and optimize our products, including AI-assisted features
- To perform analytics, research, and benchmarking (using aggregated or anonymized data where feasible)
- To comply with legal and regulatory obligations
Legal Basis for Processing
We process personal data on one or more of the following lawful bases:
- Your consent
- Performance of a contract with you
- Compliance with legal obligations
- Our legitimate interests in operating and improving the Services, provided such interests do not override your rights
Marketing Communications
We may send you newsletters, product updates, or promotional communications where permitted by law.
You may opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly. Service-related communications are not subject to opt-out.
Data Sharing and Disclosure
We do not sell or rent your personal data.
We may share your information with:
- Trusted service providers (e.g. hosting, analytics, payment processing, email delivery) who process data on our behalf under confidentiality and data protection obligations
- Professional advisers (legal, accounting, compliance) where necessary
- Regulatory authorities, courts, or law enforcement where required by law
- A successor entity in the event of a merger, acquisition, restructuring, or sale of assets
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, including legal, accounting, or reporting requirements.
When data is no longer required, it is securely deleted or anonymized.
Data Security
We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
International Data Transfers
Your data may be processed or stored on servers located outside Kenya. Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable data protection laws.
Your Rights
Subject to applicable law, you have the right to:
- Access your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Object to or restrict certain processing activities
- Withdraw consent where processing is based on consent
Requests may be submitted using the contact details below. We may require verification of your identity before responding.
Children’s Privacy
The Services are not intended for children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected such data, we will take steps to delete it promptly.
Third-Party Links and Services
The Services may contain links to third-party websites or integrations. We are not responsible for the privacy practices of such third parties, and we encourage you to review their privacy policies.
Changes to This Policy
We may update this Policy from time to time. Any changes will be effective upon posting the revised Policy on our website. Continued use of the Services constitutes acceptance of the updated Policy.
Contact Information
Goldberry Investments Ltd
Email: info@goldberry.co.ke
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the email above or any of the contact details in the footer below..