1. Scope
This Policy applies to use of hammer.co.ke, Hammer Accounts, supplier functions, catalogue and Project List tools, Payment Requests, payment functions, Delivery workflows, APIs or integrations where made available, support channels and other Hammer-controlled services.
2. Relationship to other terms
This Policy supplements the Marketplace Terms and applicable Buyer, Supplier, Privacy, Payment and Delivery policies. Where a specific agreement imposes stricter lawful controls, that agreement may also apply.
3. Lawful use
Users may use Hammer only for lawful marketplace, procurement, supply, payment, Delivery, support and related purposes authorised by Golden Hammer.
4. Accurate identity
Users must not impersonate another person, create a false identity, misrepresent authority, use a fake company or knowingly submit materially false registration, tax, licence, bank or verification information.
5. Account integrity
Users must not sell, rent, transfer or share credentials in a manner that bypasses Hammer's access controls. Suspected compromise should be reported promptly.
6. Unauthorised access
Users must not access or attempt to access Accounts, systems, records, admin interfaces, APIs, servers or data for which they do not have authorisation.
7. Credential attacks
Credential stuffing, password spraying, brute force, phishing, OTP theft, session hijacking and similar attempts to obtain unauthorised access are prohibited.
8. Malware
Users must not upload, transmit, deploy or facilitate malware, ransomware, spyware, malicious scripts, destructive code or other software intended to compromise systems or data.
9. Vulnerability exploitation
Users must not exploit or attempt to exploit a vulnerability against production systems without Golden Hammer's prior written authorisation. A future responsible-disclosure programme may provide a separate authorised process.
10. Security testing
Automated scanning, penetration testing, load testing or security research against Hammer infrastructure requires prior written permission unless the activity is expressly authorised by a published programme.
11. Service disruption
Users must not deliberately overload, flood, deny service, exhaust resources, interfere with availability or otherwise impair Hammer or connected services.
12. Control bypass
Users must not bypass rate limits, authentication, approval states, payment gates, Supplier approval, Delivery controls, role permissions, geographic restrictions or other technical/operational safeguards.
13. Log and evidence interference
Users must not delete, falsify, manipulate or interfere with transaction logs, audit history, timestamps, pickup evidence, Proof of Delivery, payment status or other records.
14. Fraud
Fraudulent Orders, false refund claims, stolen payment methods, fabricated documents, fake Supplier applications, identity fraud, dishonest chargebacks and attempts to obtain Goods or money without entitlement are prohibited.
15. Money laundering and unlawful finance
Hammer must not be used to conceal the source, ownership, movement or destination of criminal proceeds or facilitate unlawful financial activity.
16. Payment manipulation
Users must not manipulate payment references, screenshots, provider callbacks, settlement records, refund states, discount logic or payment-status information.
17. Supplier settlement fraud
Unauthorised attempts to change Supplier settlement details, redirect funds, impersonate authorised Supplier personnel or manipulate reconciliation are prohibited.
18. Counterfeit and stolen Goods
No counterfeit, stolen, unlawfully imported, prohibited or knowingly infringing Goods may be listed, offered, supplied or procured through Hammer.
19. Unsafe or recalled Goods
Users must not knowingly offer or continue supplying Goods subject to a safety prohibition, recall or material compliance failure without disclosure and lawful corrective action.
20. False product information
Misrepresenting brand, grade, standard, certification, dimensions, quantity, origin, manufacturer, warranty, safety, approval, availability or other material product information is prohibited.
21. Fake stock and bait pricing
Suppliers must not advertise stock they know is unavailable or use misleading low prices merely to attract enquiries and switch Buyers to different Goods.
22. Quantity manipulation
Short weight, short measure, false counts, manipulated scales or deliberate quantity misrepresentation are prohibited.
23. Unauthorised substitutions
Suppliers must not substitute materially different Goods outside the authorised Order-change workflow.
24. Fake Orders
Users must not create artificial Orders, transactions or enquiries to manipulate rankings, performance data, commissions, incentives, reviews or marketplace activity.
25. Collusion
Users must not collude to manipulate prices, bids, Supplier selection, reviews, Orders, refunds, Delivery evidence or marketplace outcomes unlawfully.
26. Competition law
Users must not use Hammer to facilitate unlawful price fixing, market allocation, bid rigging, cartel conduct or other prohibited anti-competitive arrangements.
27. Bribery
Users must not offer, request, authorise or provide bribes, kickbacks or improper benefits to Hammer personnel, Buyers, Payers, Suppliers, drivers, public officials or other participants.
28. Legitimate commercial incentives
Lawful discounts, rebates, commissions or incentives must be transparently documented through authorised commercial arrangements and must not be disguised bribes or secret kickbacks.
29. Reviews
Users must not buy, sell, fabricate, coordinate or manipulate reviews or ratings, nor retaliate against a person for a good-faith review or complaint.
30. Harassment
Threats, stalking, intimidation, discriminatory abuse, sexual harassment, coercion or abusive conduct toward users, staff, Suppliers, drivers or site personnel are prohibited.
31. Dangerous instructions
Users must not pressure a Supplier, driver or other participant to perform an unsafe or unlawful loading, transport, site-access, unloading or handling activity.
32. Data harvesting
Users must not harvest Buyer, Supplier, Payer, driver, site-contact or other personal data for unrelated purposes, resale, spam or unauthorised marketing.
33. Scraping
Automated extraction of catalogue, pricing, Supplier, Buyer or transaction data beyond ordinary authorised use, permitted search-engine indexing or an authorised API is prohibited where lawfully restrictable.
34. Competitive database copying
Users must not systematically copy Hammer's curated catalogue, Supplier network, product taxonomy, commercial data or other protected database content to build an unauthorised competing dataset or service.
35. Search-engine indexing
This Policy does not prohibit ordinary public search-engine crawling that complies with Hammer's published technical controls and Applicable Law.
36. API use
If Hammer later provides APIs, users must comply with the applicable API terms, authentication, rate limits, permitted purposes and data-retention restrictions.
37. Personal data
Users receiving personal data through Hammer may use it only for the authorised transaction or another lawful disclosed purpose and must protect it appropriately.
38. Confidential information
Non-public project requirements, pricing arrangements, fraud controls, business information, payment data and transaction records obtained through Hammer must not be disclosed or misused.
39. Intellectual property
Users must not upload or distribute content they do not have the right to use. Copyright, trademark, design, patent and other rights must be respected.
40. Misuse of Hammer branding
Users must not falsely represent themselves as Golden Hammer, an authorised Hammer employee, exclusive partner, agent or endorsed Supplier beyond the status Hammer actually grants.
41. Domain and impersonation abuse
Users must not create deceptive domains, pages, social profiles, communications or payment instructions designed to impersonate Hammer or mislead users about an official Hammer channel.
42. Off-platform payment diversion
A Supplier, driver or other participant must not request that a Hammer transaction be paid through an unauthorised private account or channel.
43. Circumvention
Where a valid contractual anti-circumvention obligation applies, users must not intentionally use confidential Hammer-generated opportunities or transaction data to evade agreed fees or controls.
44. No overbroad restraint
Anti-circumvention is not intended to prohibit legitimate pre-existing relationships or ordinary competition beyond the scope of the applicable agreement. The signed commercial agreement should define the restriction precisely.
45. Delivery fraud
Fake pickup, fake Proof of Delivery, staged damage, false waiting claims, route manipulation, collusion or unauthorised cash collection are prohibited.
46. Evidence integrity
Photographs, signatures, codes, certificates, invoices, receipts, product records and other evidence must not be forged, recycled or materially altered to mislead Hammer or another participant.
47. Complaint abuse
Users must not knowingly make false complaints, fabricate shortages, substitute Goods for a return or abuse dispute procedures to obtain an unwarranted refund.
48. Good-faith complaints
A genuine complaint is not prohibited merely because it is ultimately unproven. Hammer should distinguish mistake/disagreement from deliberate dishonesty.
49. Support abuse
Users must not spam support, threaten staff, submit knowingly false emergencies or use support channels to distribute malware, phishing or unrelated promotions.
50. Prohibited content
Users must not use Hammer-controlled content fields to distribute unlawful threats, fraud, malware, illegal commercial material or content whose publication itself would violate Applicable Law.
51. Regulatory evasion
Users must not use Hammer to evade product standards, tax, customs, licensing, consumer-protection, sanctions, court orders or other lawful requirements.
52. Government/public procurement
Where a transaction involves public procurement or a regulated tender, users remain responsible for complying with the applicable procurement, anti-corruption and conflict-of-interest rules.
53. Conflicts of interest
Users should disclose material conflicts where required by law or an applicable commercial process and must not manipulate Hammer processes through undisclosed improper relationships.
54. Enforcement information
Hammer may use transaction, security, Account, payment, Supplier, Delivery, complaint and audit information reasonably necessary to investigate suspected violations.
55. Preservation
Hammer may preserve relevant records where there is a reasonable basis to investigate fraud, security incidents, legal claims, regulatory matters or serious Policy violations.
56. Feature restriction
Hammer may temporarily restrict particular features, Offers, payment functions, Delivery functions or settlement access where reasonably necessary to contain risk.
57. Account suspension
Hammer may suspend an Account where there is a reasonable basis to investigate serious misconduct, protect users, comply with law or prevent ongoing harm.
58. Urgent action
Where delay could materially increase fraud, safety, cybersecurity, financial or legal risk, Hammer may act before giving notice, subject to Applicable Law.
59. Proportionality
Enforcement should consider severity, intent, recurrence, harm, evidence and ability to remediate. A genuine first-time mistake should not automatically be treated as organised fraud.
60. Reinstatement
Hammer may restore access after verification, remediation or investigation. Reinstatement does not erase prior transaction/audit records.
61. Termination
Serious or repeated violations may result in termination under the Marketplace Terms or applicable Supplier/other agreement.
62. Financial holds
Where permitted by the applicable agreement and law, Hammer may temporarily hold settlement or refunds directly connected to a credible fraud, chargeback, fulfilment or financial-risk investigation.
63. No forfeiture by policy alone
This Policy does not create an automatic right for Hammer to confiscate money. Any deduction, set-off, recovery or forfeiture must have a contractual or legal basis.
64. Reporting to authorities
Hammer may report suspected crime, fraud, cyber abuse, product-safety issues or regulatory breaches to the appropriate provider or authority where legally required or lawfully justified.
65. Legal requests
Hammer may preserve or disclose records in response to valid court orders, statutory demands or other lawful process, subject to applicable privacy and confidentiality obligations.
66. Security incident cooperation
Users involved in a suspected security incident may be required to reset credentials, re-verify identity, revoke sessions or provide reasonable information necessary to secure the Account.
67. Remedies
Hammer may pursue contractual recovery, debt recovery, injunctive relief, damages or other lawful remedies for serious violations that cause loss or threaten the Platform.
68. No retaliation
Hammer should not retaliate against a person merely for reporting a good-faith safety, fraud, privacy, legal or security concern.
69. Policy changes
Material changes should be dated and communicated appropriately. A later version should not retroactively manufacture a violation for conduct that was permitted when it occurred.
70. Contact
The final Policy should provide the actual abuse/security/support reporting routes, with a dedicated security contact if Hammer establishes one.