PRIVACY POLICY
Welcome to the website of Gillian Neky & Company Advocates (“we”, “our”, or “the Firm”).
We value your privacy and are committed to protecting your personal data in accordance with the Data Protection Act, 2019 (Kenya) and, where applicable, the EU General Data Protection Regulation (GDPR).
This Privacy Policy explains how we collect, use, share, and protect your personal information when you interact with us, whether through our website, email, social media, or in the course of our professional engagement with you.
By using this website, you consent to the terms of this Policy.
1. What Information We Collect
We may collect and process the following categories of personal data:
a. Information you provide directly:
- Name, contact details (email, phone number), and organisation;
- Information submitted via our contact forms, newsletter sign-ups, or event registrations;
- Any other personal data voluntarily shared with us.
b. Information we collect automatically:
- Log data such as your IP address, browser type, and pages visited;
- Analytical data collected via cookies or similar technologies to improve our website experience.
c. Information obtained through professional engagement:
- Identity, contact, and billing details;
- Any information necessary to verify identity for client due diligence or regulatory compliance.
2. How We Use Your Information
We use your personal data to:
- Respond to your enquiries or requests;
- Provide legal services and manage client relationships;
- Send legal updates, newsletters, and event invitations (where you have consented);
- Comply with legal and regulatory obligations, including anti-money laundering (AML) requirements;
- Improve our website and service delivery.
We will only use your personal data for the purpose for which it was collected, unless we consider that we need to use it for another related and lawful reason.
3. Cookies & Analytics
Our website may use cookies and analytics tools to understand how visitors interact with our site. Cookies help us improve functionality and tailor user experience.
You can modify your browser settings to decline cookies if you prefer. Please note that disabling cookies may affect certain features of the site.
4. Legal Basis for Processing
We process personal data on one or more of the following legal bases:
- Your consent;
- The performance of a contract or engagement;
- Compliance with legal or regulatory obligations; or
- Our legitimate interest in operating and improving our services and communications.
5. How We Share Your Data
We do not sell or rent your personal data.
We may share your information only when necessary:
- With trusted third-party service providers (e.g., IT support, email systems, or data storage) who assist in operating our business under strict confidentiality obligations;
- With regulatory authorities or law enforcement, where required by law;
- With other professionals or consultants, where disclosure is essential for providing legal services, subject to confidentiality.
6. Data Retention
We retain personal data only as long as necessary to fulfill the purpose for which it was collected, including satisfying legal, accounting, or regulatory requirements.
Once data is no longer required, it will be securely deleted or anonymized.
7. Data Security
We implement appropriate technical and organisational measures to safeguard your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.
While we take all reasonable precautions, no system is completely secure, and we cannot guarantee the absolute security of your information.
8. Your Rights
Under the Kenya Data Protection Act, 2019, and applicable international standards, you have the right to:
- Access and request a copy of your personal data;
- Request correction or deletion of inaccurate or outdated information;
- Withdraw consent to processing (where applicable);
- Object to processing based on legitimate interests; and
- Request restriction of processing or data portability, where applicable.
Requests may be submitted to:
We may require verification of your identity before processing your request.
9. International Data Transfers
Where data is transferred outside Kenya, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws to protect your information.
10. Children’s Privacy
Our website and services are not intended for children under 18 years of age. We do not knowingly collect or process personal data from minors.
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in law or our internal practices. The latest version will always be available on this page, and the “Last Updated” date will indicate when revisions took effect.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle personal data, please contact us at:
📍 Nairobi, Kenya
© 2025 Gillian Neky & Company Advocates. All rights reserved.