Privacy Policy
At Gitari N. Law Advocates (“the Firm”, “we”, “our”, or “us”), we recognize that privacy, confidentiality, and trust are fundamental to every relationship we build with our clients. As a law firm, we are entrusted with highly sensitive personal and commercial information, and we are committed to protecting that information with the highest standards of professionalism, integrity, and security.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal information obtained through our website, during the provision of legal services, and through our interactions with clients, prospective clients, business partners, suppliers, employees, and other stakeholders. We process personal data in accordance with the Constitution of Kenya, the Data Protection Act, 2019, the Data Protection (General) Regulations, 2021, and all other applicable laws governing the protection of personal information.
Who we are
Gitari N. Law Advocates is a full-service law firm providing strategic legal solutions to individuals, businesses, financial institutions, investors, and public sector entities. In the course of delivering our services, the Firm acts as a Data Controller and, where appropriate, a Data Processor as defined under the Data Protection Act, 2019.
Information We Collect
The information we collect depends on the nature of our engagement with you. It may include personal identification details such as your name, identification or passport number, KRA PIN, date of birth, nationality, contact information, residential or postal address, and occupation. Where we act for companies or other organizations, we may also collect corporate information, including company registration details, beneficial ownership information, and details of directors, shareholders, or authorized representatives.
Where necessary for the provision of legal services or compliance with applicable law, we may process sensitive personal data, including financial information, banking details, health information, criminal records, biometric information, court records, or information relating to children. Such information is processed only where permitted by law or with the appropriate legal basis.
When you visit our website, we may also collect technical information such as your IP address, browser type, device information, operating system, pages visited, cookies, and website usage data to improve the performance, security, and functionality of our website.
How We Collect Your Information
Personal information may be collected directly from you when you contact us, instruct us to provide legal services, complete client onboarding documentation, subscribe to our publications, attend our events, or communicate with us by telephone, email, or other electronic means.
We may also receive information from third parties, including regulatory authorities, government agencies, public registries, financial institutions, referral partners, opposing parties, professional advisers, and other persons where such collection is lawful and necessary for the performance of our professional duties.
How We Collect Your Information
Personal information may be collected directly from you when you contact us, instruct us to provide legal services, complete client onboarding documentation, subscribe to our publications, attend our events, or communicate with us by telephone, email, or other electronic means.
We may also receive information from third parties, including regulatory authorities, government agencies, public registries, financial institutions, referral partners, opposing parties, professional advisers, and other persons where such collection is lawful and necessary for the performance of our professional duties.
How We Use Your Information
We use personal information solely for legitimate legal and business purposes. This includes providing legal advice and representation, conducting legal research, managing client relationships, carrying out conflict checks, complying with Know Your Customer (KYC) requirements, fulfilling our obligations under anti-money laundering and counter-terrorism financing legislation, preparing legal documents, issuing invoices, collecting fees, responding to enquiries, recruiting employees, administering our business, improving our website, and protecting our legal rights and interests.
Where appropriate, we may also use your contact details to communicate legal updates, publications, events, or other information relating to our services. You may opt out of receiving such communications at any time.
Lawful Basis for Processing
We process personal information only where there is a lawful basis for doing so. Depending on the circumstances, this may include processing that is necessary for the performance of a contract, compliance with a legal obligation, the establishment, exercise or defence of legal claims, the protection of vital interests, our legitimate business interests, or your consent where consent is required by law.
Confidentiality and Legal Professional Privilege
Confidentiality lies at the heart of the legal profession. All information provided to the Firm in the course of a professional engagement is treated as strictly confidential and, where applicable, protected by legal professional privilege. We maintain robust internal procedures to safeguard confidential information and only disclose such information where authorized by our client, required by law, or directed by a competent court or regulatory authority.
Compliance with Anti-Money Laundering Laws
As part of our professional and statutory obligations, we may collect and verify information necessary to comply with anti-money laundering, counter-terrorism financing, sanctions, and customer due diligence requirements. This may include identity verification, source of funds information, beneficial ownership details, and other documentation required by applicable law. Where legally required, we may disclose relevant information to competent regulatory or law enforcement authorities.
Cookies and Website Analytics
Our website uses cookies and similar technologies to improve functionality, analyze website traffic, enhance user experience, and maintain website security. Cookies help us understand how visitors interact with our website and enable us to improve our online services. You may disable cookies through your browser settings; however, doing so may affect certain features of the website.
Disclosure of Personal Information
We do not sell, rent, or trade personal information. Personal data is disclosed only where necessary for the provision of legal services, compliance with legal obligations, or the protection of our legitimate interests. Depending on the nature of the engagement, information may be shared with courts, tribunals, regulatory authorities, government agencies, external advocates, consultants, experts, financial institutions, technology service providers, auditors, insurers, or other professional advisers, all subject to appropriate confidentiality obligations and applicable legal safeguards.
International Transfers
Where it becomes necessary to transfer personal information outside Kenya, we will ensure that appropriate safeguards are implemented in accordance with the Data Protection Act, 2019, and any applicable regulations governing cross-border data transfers.
Data Security
Protecting the information entrusted to us is a responsibility we take seriously. We maintain appropriate administrative, technical, and physical safeguards designed to protect personal information against accidental loss, unauthorized access, disclosure, alteration, misuse, or destruction. These safeguards include secure information systems, controlled access to client information, encryption where appropriate, staff confidentiality obligations, and regular reviews of our security practices. While every reasonable effort is made to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.
Data Retention
We retain personal information only for as long as is reasonably necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, enforce our legal rights, and satisfy professional record-keeping requirements. Once retention is no longer necessary, personal information is securely deleted, destroyed, or anonymised in accordance with our internal policies and applicable law.
Your Rights
Subject to applicable law, you have the right to be informed about how your personal information is processed, to request access to your personal data, to request correction of inaccurate or incomplete information, to request deletion where legally permissible, to object to certain forms of processing, to restrict processing in appropriate circumstances, to withdraw consent where processing is based on consent, and to lodge a complaint with the Office of the Data Protection Commissioner.
Certain rights may be limited where the information is protected by legal professional privilege, where disclosure would prejudice legal proceedings, or where the Firm is required by law to retain or continue processing the information.
Third-Party Websites
Our website may contain links to external websites operated by third parties. These websites have their own privacy policies and practices, and we do not accept responsibility for their content or the manner in which they collect or process personal information. We encourage you to review the privacy policies of any third-party websites you visit.
Children's Privacy
Our website is not intended for use by children. Where we process personal information relating to a child as part of the legal services we provide, such processing is undertaken only where authorized by law and in accordance with the applicable legal requirements governing the protection of children’s personal information.
Changes to this Privacy Policy
We may amend this Privacy Policy from time to time to reflect changes in our legal obligations, business operations, or technological developments. Any updates will be published on this page together with the revised effective date. We encourage users to review this Privacy Policy periodically to remain informed about how we protect personal information.
