Privacy Policy.

Muchangi Patrick & Associates Advocates ("we," "us," "the firm") is a data protection registered controller under the Data Protection Act, 2019 (Kenya). This policy explains how we collect, use, and protect personal data submitted through this website - dataprivacyadvocates.co.ke. It does not cover data we process for our clients under separate instructions, which is governed by our engagement terms with each client.

We process this data to respond to enquiries, deliver requested resources, send the newsletter you have opted into, and understand how visitors use the site so we can improve it. Our lawful bases under the Data Protection Act, 2019 are: consent (newsletter sign-up, optional analytics cookies) and legitimate interest (responding to enquiries you initiate, maintaining site security).

Enquiry and contact form data is retained for as long as needed to respond to you and, where an engagement follows, as required by our professional and regulatory record-keeping obligations. Newsletter data is retained until you unsubscribe. You can ask us to delete your data at any time, subject to any legal retention requirements that may apply.

We do not sell or rent personal data. We share limited data with service providers who help us run this site and communicate with you - our website host (Netlify), our email provider, and Google Analytics for aggregated usage statistics - each bound by their own privacy and security obligations. We do not transfer your data outside Kenya except where these processors do so as part of their standard, secured infrastructure.

Under the Data Protection Act, 2019, you have the right to access, correct, delete, or restrict the use of your personal data, to object to certain processing, and to data portability. To exercise any of these rights, contact us using the details below.

Questions about this policy or how we handle your data: [email protected]. If you believe we have not handled your data properly, you also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.