What we hold about you, and why.
Written to be read, not skimmed. If a sentence here is not true of the portal, that is a fault and we fix the portal.
Last updated 13 October 2026
1. Who is responsible
Hirgal Oil Limited, Eastleigh, Nairobi, Kenya, runs this website and the investor portal, and is responsible for the information in them. Questions go to Hirgaloil@gmail.com.
2. What we hold
| What | Why |
|---|---|
| Your name, email and phone | So Hirgal can create your account and reach you about your statement. |
| Who you are, and how you are paid | Your identity and tax numbers, your next of kin, the account Hirgal pays you into, and copies of the documents you or Hirgal add — so payments reach the right person. |
| Your position | Each contribution, each share of a declared result, and each payment — with dates, amounts, methods and references. |
| Sign-in records | When you signed in, and from which kind of device, so unusual access can be noticed. |
| The history of changes | Who on Hirgal's team recorded, published or corrected what, and when. Kept permanently — it is the audit trail. |
Documents are kept in private storage: only Hirgal's team can open them, and only from inside the portal. We hold nothing about you that is not needed to keep your position on the record and to pay you correctly.
3. Who can see it
- Yousee your own position and nobody else's. This is enforced on the server for every request.
- Hirgal's team — the people who record contributions, declare results and make payments — see the whole book. Each of them signs in with their own name, and every action they take is logged against it.
- Hirgal's auditor can read everything and change nothing.
- Nobody else.We do not sell, rent or share your information. The services below process it on Hirgal's behalf and under Hirgal's instructions.
4. The services that process it
| Service | What it does |
|---|---|
| Supabase (Frankfurt, Germany) | Holds the records and handles sign-in, including Google sign-in. |
| Vercel | Serves the portal. |
| Only if you choose to sign in with Google. Google tells the portal your email address; nothing else. | |
| Sentry | Receives error reports if the portal fails, so it can be fixed. No figures are included. |
| Resend | Sends emails — a sign-in link, a password reset, a statement — once Hirgal's email is set up. |
5. The assistant
Where the assistant is switched on for you, it answers questions by reading your own records at the moment you ask. It is not trained on your information, and it can never see another person's. Your question and its answer are not kept after the conversation.
6. How long we keep it
Your position is a financial record. It is kept for as long as Hirgal is required to keep its books, and it is never edited after a result is published — only corrected by a new dated entry. If your account is closed, you can no longer sign in, but the records of what happened remain, because they are also Hirgal's records.
7. Cookies
The portal uses only the cookies it needs to keep you signed in and to remember whether you prefer the light or the dark screen. There is no advertising and no tracking across other websites.
8. Your rights
You can see everything held about you by signing in — that is the point of the portal. To correct your name, email or phone, or to ask a question about your records, contact Hirgal at the address above.
9. If you send an enquiry
The form on the contact page keeps what you type into it — your name, email, phone, country and town, what you would like to do, and your message — so that Hirgal's team can answer you. It is seen by that team only, in their own list, and each person who follows it up writes down what was done.
Your internet address is not kept. A scrambled form of it is, which cannot be turned back into the address, only so that one connection cannot send hundreds of enquiries. If you become an investor, your enquiry stays linked to your account. If you do not, ask us at the address above and we will remove it.
10. Changes
If this policy changes, the date at the top changes and account holders are told on their next sign-in. See also the terms of use.