Privacy Policy

1. Who is responsible for your data

S.N. Nyaga & Company Advocates is the data controller for personal data described in this Policy. You may contact us at info@snnyagaadvocates.co.ke, +254 728 852 448, or Westpark Towers, 11th Floor, Mpesi Lane, Westlands, Nairobi.

2. Personal data we may collect

We may collect your name, contact details, organisation, the service you are interested in, the information you include in an enquiry, correspondence with the firm, and limited technical or security information generated when the website is accessed. Please do not submit confidential documents, special-category personal data or detailed case materials until the firm has confirmed that it can act.

3. How and why we use personal data

We use personal data to assess and respond to enquiries; conduct preliminary conflict and availability checks; take steps requested before a possible engagement; administer, secure and improve the website; maintain appropriate business records; and comply with professional, regulatory and legal obligations. Depending on the circumstances, processing may be based on consent, steps taken at your request before entering an engagement, compliance with law, or our legitimate interests in operating and protecting the firm.

If you email a request about the firm’s planned monthly commercial and regulatory briefing, we use the request and your email address to process that preference. An invitation request permits contact about confirmation only; it does not activate a subscription or add you to a general marketing list. Recurring email editions require a separate affirmative confirmation from your own address. You may withdraw by emailing info@snnyagaadvocates.co.ke without an explanation or marketing consent.

The briefing email links prepare a message in your email application. You must send it before the firm can receive and process your choice. Clicking a link alone does not record an invitation request, withdrawal or subscription. Email editions are not yet active.

4. Enquiries and advocate–client confidentiality

Submitting an enquiry does not by itself create an advocate–client relationship and does not mean that the firm has accepted the matter. Do not assume that information is protected as client communication until the firm confirms the engagement in writing. We nevertheless treat enquiry information responsibly and restrict access to those who need it for assessment and response.

5. Service providers and international processing

Website enquiry and briefing links open your email application so you can contact the firm directly. The website no longer forwards those requests through a form-delivery provider. Your chosen email service and the firm’s email provider process the correspondence you send. We also use providers for hosting, security, business continuity and aggregate website measurement, including Plausible Analytics. Providers may operate infrastructure outside Kenya. Where personal data is transferred outside Kenya, we take reasonable steps to use an appropriate legal basis and safeguards consistent with applicable data-protection requirements.

You may optionally tell us how you found the firm and who introduced you. We use this information to understand enquiry sources and manage the introduction. Referrer names, contact details and enquiry text are not included in website analytics events.

WhatsApp links open an external messaging service only when you choose to use them. Your communications through that service are also subject to WhatsApp’s terms and privacy practices. Please begin with a non-confidential outline and do not send sensitive documents until the firm agrees a suitable route.

6. Cookies and analytics

The website uses Plausible Analytics to understand aggregate matters such as page visits, referral sources and contact-link interactions. An email-link click does not establish that an email was sent or received. These events exclude message content and contact details. Analytics is configured without advertising cookies or cross-site advertising profiles. We use these measurements to improve the website. If we introduce non-essential cookies or technologies requiring consent, we will provide an appropriate notice and control before using them.

7. Interactive legal toolkit

The Legal Toolkit assessments operate within your browser. Assessment selections and generated results are not transmitted to or stored by the firm. If you separately contact the firm after using a tool, the information you choose to include in that enquiry will be handled as described in this Policy. Do not enter confidential, sensitive or personally identifying information into an assessment.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable professional, conflicts, legal, accounting or dispute requirements. An enquiry that does not become a client matter will ordinarily be reviewed for deletion or anonymisation within 24 months after the last substantive contact, unless a longer period is reasonably required.

Unconfirmed briefing-interest requests are reviewed after 90 days and deleted or anonymised when no longer needed, unless there is a documented reason to retain them. A minimal record of an objection or withdrawal may be retained to prevent renewed contact, with access limited to those managing preferences. Reading the public briefing does not require providing contact details.

9. Security

We use proportionate administrative and technical safeguards intended to protect personal data against unauthorised access, loss, misuse or alteration. No internet transmission is completely secure, so confidential or urgent instructions should be provided only through a channel agreed with the firm.

10. Your rights

Subject to applicable law, you may ask to be informed about the use of your personal data; access it; object to processing; request correction, restriction, deletion or portability where applicable; and withdraw consent where consent is the basis relied upon. Contact us using the details above. You may also raise a complaint with Kenya’s Office of the Data Protection Commissioner.

11. Third-party websites

This website may link to external websites. Their operators are responsible for their own privacy practices, and we encourage you to review their notices.

12. Changes to this Policy

We may update this Policy to reflect changes in law, technology or our services. The effective date above will be revised when a material change is published.