Effective Date: 18th December, 2025
Welcome to McMogan Energies. Your privacy is important to us. This Privacy Policy explains how McMogan Limited (“we,” “us,” or “our”) collects, uses, discloses, and safeguards your information when you visit our website https://mcmoganenergies.co.ke (the “Site”).
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
1. Who We Are
Our website address is: https://mcmoganenergies.co.ke.
McMogan Limited is a Kenyan enterprise, incorporated on 3rd November 2017, specializing in the supply of Liquefied Petroleum Gas (LPG) to restaurants, learning institutions, retailers, and households in Kiambu, Nairobi, and Machakos counties. Our company offices are located in Machakos. We are committed to integrity, accountability, and professionalism in all our dealings, including the handling of your personal data.
2. Comments
When visitors leave comments on the site, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
3. Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
4. Cookies
If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
5. Embedded Content from Other Websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
6. Data We Collect for Our Services
In addition to the data collected via the Site’s interactive features (like comments), we collect information necessary to provide our LPG supply and delivery services. This may include:
-
Contact Information: Name, physical address, email address, and phone number provided when you inquire about or place an order for our products.
-
Service Details: Information related to your order, delivery address, and cylinder size to ensure safe, quality, and timely service delivery.
-
Communication Records: Copies of your communications with us via contact forms, email, or phone, which we store to provide customer service and maintain our professional standards.
7. Who We Share Your Data With
We value your trust. We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties except in the following circumstances:
-
Service Providers: We may share your data with trusted third parties who assist us in operating our website, conducting our business (such as delivery logistics), or servicing you, so long as those parties agree to keep this information confidential and use it only for the purpose of providing services to McMogan Energies.
-
Legal Compliance: We will release information when its release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.
-
Password Reset: If you request a password reset, your IP address will be included in the reset email.
8. How Long We Retain Your Data
-
Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
-
User Accounts: For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
-
Service Data: We retain customer service and order information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements, and in line with our core value of accountability.
9. What Rights You Have Over Your Data
If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
10. Where Your Data Is Sent
Visitor comments may be checked through an automated spam detection service. This service may process data outside of Kenya. By using our site and leaving comments, you acknowledge this transfer.
11. Contact Us
If you have any questions about this Privacy Policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email: info@mcmoganenergies.co.ke
Address: McMogan Limited, Machakos, Kenya.
This policy is based on a template provided by Automattic (https://automattic.com/privacy/) and is licensed under Creative Commons Sharealike. It has been adapted and revised to reflect the specific data practices of McMogan Energies.
Privacy Policy for McMogan Energies
Effective Date: October 26, 2024
Last Updated: October 26, 2024
1. Introduction and Controller Information
McMogan Limited (“we,” “us,” or “our”) is a data controller responsible for your personal data. We are a Kenyan enterprise, incorporated on 3rd November 2017, specializing in the supply of Liquefied Petroleum Gas (LPG). Our company offices are located in Machakos, Kenya. Our website address is: https://mcmoganenergies.co.ke.
This Privacy Policy describes how we collect, use, process, and disclose your personal information in compliance with multiple legal frameworks, including:
-
Kenya: The Data Protection Act, 2019.
-
European Union/European Economic Area (EU/EEA): The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).
-
United States: Applicable federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the CPRA, the Virginia Consumer Data Protection Act (VCDPA), and others as applicable.
2. Scope and Legal Basis for Processing (GDPR)
This policy applies to all personal data we process, whether collected through our website, via email, phone, or in person for our LPG services.
For individuals in the EU/EEA, we process your personal data on one or more of the following legal bases under the GDPR:
-
Contractual Necessity: To fulfill a contract with you (e.g., to process and deliver your LPG order).
-
Legitimate Interests: For our legitimate business interests, provided your interests and fundamental rights do not override those interests (e.g., website security, fraud prevention, direct marketing of similar services). We conduct a Legitimate Interest Assessment (LIA) for such processing.
-
Consent: Where you have given clear, affirmative consent for a specific purpose (e.g., subscribing to a marketing newsletter).
-
Legal Obligation: To comply with a legal or regulatory obligation in Kenya or other applicable jurisdictions.
3. Information We Collect and Purpose
| Category of Data | Specific Examples | Primary Purpose of Processing (Linked to Legal Basis) |
|---|---|---|
| Identity & Contact Data | Name, billing/delivery address, email, phone number. | To process and fulfill your LPG order (Contract), manage our customer relationship (Legitimate Interest), and send service communications. |
| Financial & Transaction Data | Order details, cylinder size, payment information (processed securely by third-party gateways), delivery history. | To complete your purchase (Contract), manage accounts, and for internal accounting (Legal Obligation). |
| Technical & Usage Data | IP address, browser type/version, time zone, operating system, device information, pages visited, navigation paths. | To administer and protect our website (Legitimate Interest), analyze use for improvement (Legitimate Interest w/ consent for non-essential cookies). |
| Profile & Communication Data | Username/password for account, purchase preferences, feedback, survey responses, correspondence with us. | To enable account login (Contract), personalize your experience (Legitimate Interest/Consent), and improve services. |
| Marketing & Communications Data | Preferences in receiving marketing from us and third parties. | To send relevant offers and news about our services (Consent or Legitimate Interest for existing customers under soft opt-in rules where applicable). |
Comments & Media: As detailed in the initial policy, we collect data from comments and may process embedded location data from uploaded images.
4. Cookies and Tracking Technologies
We use essential cookies necessary for the website’s basic functions. For non-essential cookies (analytics, advertising), we rely on your prior consent as required by the GDPR and similar laws. You can manage your cookie preferences via our cookie banner or your browser settings. We do not sell your personal data for monetary or other valuable consideration as defined under the CCPA.
5. International Data Transfers
Your data is primarily processed in Kenya. However, some service providers (e.g., website hosting, spam detection, analytics) may be located outside Kenya, the EU, or your home jurisdiction.
-
Transfers under GDPR: When we transfer personal data of EU/EEA individuals to countries not deemed “adequate” by the European Commission (like Kenya), we implement appropriate safeguards as per Chapter V of the GDPR. These include Standard Contractual Clauses (SCCs) approved by the European Commission with our providers.
-
General Safeguards: We ensure all transfers are protected by necessary contractual clauses and security measures to maintain an adequate level of data protection.
6. Data Subject Rights
Depending on your location and applicable law, you may have the following rights:
| Your Right (General) | Brief Description | Applicable Under |
|---|---|---|
| Right to Access | Request a copy of the personal data we hold about you. | GDPR, Kenya DPA, CCPA |
| Right to Rectification | Request correction of inaccurate or incomplete data. | GDPR, Kenya DPA |
| Right to Erasure (“Right to be Forgotten”) | Request deletion of your data under certain conditions. | GDPR, Kenya DPA |
| Right to Restriction of Processing | Request limitation on how we use your data. | GDPR, Kenya DPA |
| Right to Data Portability | Receive your data in a structured, machine-readable format. | GDPR |
| Right to Object | Object to processing based on legitimate interests or for direct marketing. | GDPR, Kenya DPA |
| Right to Withdraw Consent | Withdraw consent at any time where processing is based on consent. | GDPR, Kenya DPA |
| Right to Non-Discrimination | Not to receive discriminatory treatment for exercising your privacy rights. | CCPA, VCDPA, etc. |
| Right to Opt-Out of Sale/Sharing | Direct us not to “sell” or “share” your personal information (as those terms are defined under applicable US state laws). | CCPA, CPRA, etc. |
How to Exercise Your Rights: To exercise any of these rights, please contact us using the details in Section 11. We will respond within the timeframe required by the applicable law (e.g., one month under GDPR, 45 days under CCPA). We may need to verify your identity before fulfilling your request.
7. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. Our retention periods are determined by:
-
The nature of the data and purpose of processing.
-
Legal obligations under Kenyan law (e.g., tax records).
-
Limitation periods for potential legal claims.
For example, customer service and order information is typically retained for seven (7) years from the end of the financial year in which the transaction occurred for tax compliance purposes. Inactive user accounts may be deleted after two (2) years of inactivity.
8. Data Security
In line with our core values of reliability and professionalism, we have implemented appropriate technical and organizational security measures (such as encryption, access controls, and secure protocols) to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed.
9. Sharing Your Personal Data
We may share your data with:
-
Service Providers: Trusted third parties who provide IT, payment processing, delivery, and system administration services under strict contractual data processing agreements.
-
Professional Advisors: Lawyers, bankers, auditors, and insurers where necessary for our professional services.
-
Authorities: Government bodies, regulators, and law enforcement agencies as required by Kenyan law or to protect our rights.
We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
10. Children’s Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us to request deletion.
11. Contact & Complaints
Data Protection Officer / Privacy Contact:
For all privacy-related inquiries, including exercising your rights, please contact:
Email: inquiries@mcmoganenergies.co.ke
Postal Address: The Privacy Officer, McMogan Limited, Machakos, Kenya.
If you are in the EU/EEA and believe our processing of your data infringes the GDPR, you have the right to lodge a complaint with your local supervisory authority. In Kenya, you may contact the Office of the Data Protection Commissioner (ODPC).
12. Changes to This Policy
We may update this policy periodically. The updated version will be indicated by a revised “Last Updated” date at the top. We encourage you to review this policy frequently to stay informed about how we are protecting your information.