Legal
Privacy.
This page says what we collect on this website and on our engineering platform, why we collect it, how long we keep it and how to ask us about it. It is written to be read, not skimmed.
Operator: EPSOM, Nairobi, Kenya. Last revised 23 October 2026.
The website
Reading this website sends your browser's ordinary requests to the content delivery network that serves it. The network records the request (address, page, time, browser) in its logs for a short period to keep the site running and to defend it against abuse. We do not place advertising or tracking cookies, and this site sets no cookie of its own.
We may use the delivery network's privacy-preserving analytics to count visits and pages. That count does not use cookies, does not build a profile of you and does not follow you to other sites.
The request-for-proposal form
When you send the form on the contact page we receive what you typed: your name, organisation, email, phone, the project type, location and stage, your message and any link you give. The form is protected by a challenge from the delivery network that checks the request is from a person; that check may process your browser's characteristics and address according to the network provider's own policy. Your request is delivered to us by a transactional email provider and lands in our mailbox.
We use what you send only to answer you and, if we go on to work together, to prepare the proposal. We keep enquiries for up to two years so that we can pick up a conversation that pauses, then delete them, unless they have become part of a project record.
The engineering platform
EPSOM operates the engineering platform at app.epsom.co.ke. An account there holds your name, email, phone where you give it, a password hash, and the sessions you sign in with. Signing in sets one cookie on that host that identifies your session and nothing else; it is not used for advertising and is not shared.
The platform stores what you put into it: project models, analysis and design runs, issues, comments, reviews, and the reports and drawings it generates for you. Each project's members can see that project. We keep an audit trail of significant actions (who created, changed, ran, reviewed or approved what, and when) because engineering records must be traceable. Outputs are bound to immutable revisions of the model and kept so a report can be reproduced later.
The platform runs on a cloud hosting provider and a hosted database engaged for it, and is served to you through the delivery network. Project data is retained while the project exists and for as long as a professional record of the design is required, which in Kenya can be many years. You can ask us to delete an account; project records that other members rely on, and the audit trail, are kept.
If you write to us at [email protected] we keep the correspondence as part of our ordinary business records.
Your rights and how to ask
You may ask what we hold about you, ask for it to be corrected, or ask for it to be deleted where no professional record requires it. Write to [email protected]. We answer within thirty days. We follow the Data Protection Act, 2019 of Kenya.
Changes
When this page changes we update the revision date above. We do not change it quietly.