Privacy Policy

1. Who is responsible for your data

S.N. Nyaga & Company Advocates is the data controller for personal data described in this Policy. You may contact us at info@snnyagaadvocates.co.ke, +254 728 852 448, or Westpark Towers, 11th Floor, Mpesi Lane, Westlands, Nairobi.

2. Personal data we may collect

We may collect your name, contact details, organisation, the service you are interested in, the information you include in an enquiry, correspondence with the firm, and limited technical or security information generated when the website is accessed. Please do not submit confidential documents, special-category personal data or detailed case materials until the firm has confirmed that it can act.

3. How and why we use personal data

We use personal data to assess and respond to enquiries; conduct preliminary conflict and availability checks; take steps requested before a possible engagement; administer, secure and improve the website; maintain appropriate business records; and comply with professional, regulatory and legal obligations. Depending on the circumstances, processing may be based on consent, steps taken at your request before entering an engagement, compliance with law, or our legitimate interests in operating and protecting the firm.

4. Enquiries and advocate–client confidentiality

Submitting an enquiry does not by itself create an advocate–client relationship and does not mean that the firm has accepted the matter. Do not assume that information is protected as client communication until the firm confirms the engagement in writing. We nevertheless treat enquiry information responsibly and restrict access to those who need it for assessment and response.

5. Service providers and international processing

We may use carefully selected providers for website hosting and security, enquiry delivery, email, business continuity and privacy-focused usage measurement. Those providers process information only for the relevant service and may operate infrastructure outside Kenya. Where personal data is transferred outside Kenya, we take reasonable steps to use an appropriate legal basis and safeguards consistent with applicable data-protection requirements.

6. Cookies and analytics

The website does not currently deploy advertising cookies. If privacy-focused analytics is activated, it will be configured to measure aggregate website usage without cross-site advertising profiles. If we introduce non-essential cookies or technologies requiring consent, we will provide an appropriate notice and control before using them.

7. Interactive legal toolkit

The Legal Toolkit assessments operate within your browser. Assessment selections and generated results are not transmitted to or stored by the firm. If you separately contact the firm after using a tool, the information you choose to include in that enquiry will be handled as described in this Policy. Do not enter confidential, sensitive or personally identifying information into an assessment.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable professional, conflicts, legal, accounting or dispute requirements. An enquiry that does not become a client matter will ordinarily be reviewed for deletion or anonymisation within 24 months after the last substantive contact, unless a longer period is reasonably required.

9. Security

We use proportionate administrative and technical safeguards intended to protect personal data against unauthorised access, loss, misuse or alteration. No internet transmission is completely secure, so confidential or urgent instructions should be provided only through a channel agreed with the firm.

10. Your rights

Subject to applicable law, you may ask to be informed about the use of your personal data; access it; object to processing; request correction, restriction, deletion or portability where applicable; and withdraw consent where consent is the basis relied upon. Contact us using the details above. You may also raise a complaint with Kenya’s Office of the Data Protection Commissioner.

11. Third-party websites

This website may link to external websites. Their operators are responsible for their own privacy practices, and we encourage you to review their notices.

12. Changes to this Policy

We may update this Policy to reflect changes in law, technology or our services. The effective date above will be revised when a material change is published.