Data privacy notice

DRCO Kenyariri Advocates LLP (“we”, “us”, “the firm”) is the data controller for the personal data described in this notice. We are committed to handling your information lawfully, transparently and confidentially, in accordance with the Data Protection Act, 2019, the regulations made under it, and the professional duty of confidentiality owed by advocates to their clients.

Who we are

We are a firm of advocates based at 105 Sandalwood Garden, Argwings Kodhek Road, Nairobi, Kenya, regulated by the Law Society of Kenya. For any question about this notice or about your personal data, contact legal@drcokenyaririadvocatesllp.africa.

What we collect

Depending on how you interact with us, we may collect:

• Enquiry details — your name, email address, telephone number, preferred contact method, the area of law concerned and the summary of your matter that you provide through our contact form.
• Subscription details — your email address, if you sign up for our legal updates.
• Client and matter information — where we go on to act for you, the information needed to advise and represent you, including identification documents required for client due diligence, and correspondence relating to your matter.
• Technical information — limited server records such as your IP address, used to protect the website from automated abuse and spam submissions.

Please do not send sensitive documents or confidential details through the enquiry form. Share those only once we have confirmed our engagement in writing.

Why we use it, and our lawful basis

• To respond to your enquiry and arrange a consultation — on the basis of your consent and steps taken at your request before entering into an engagement.
• To carry out conflict-of-interest and client due diligence checks — to comply with our legal and professional obligations.
• To provide legal services and administer your matter — to perform our engagement with you.
• To send legal updates — only where you have subscribed, and you may unsubscribe at any time.
• To keep our website secure and prevent abuse — our legitimate interest in protecting the firm and those who contact us.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

Who we share it with

We disclose personal data only where it is necessary, and only to:

• advocates and staff within the firm working on your matter;
• courts, tribunals, regulators and opposing parties, where required to conduct your matter;
• Microsoft, which provides the email and document services we use, under the firm's Microsoft 365 agreement and its security and confidentiality obligations;
• experts, counsel, surveyors, valuers or agents instructed on your matter, where you have been informed or have agreed;
• our auditors, insurers and professional advisers, where necessary; and
• any person to whom we are required by law or court order to disclose it.

Transfers outside Kenya

Our email and document systems are provided by Microsoft and may store or process data on servers outside Kenya. Where personal data is transferred outside the country, we rely on the safeguards required by sections 48 and 49 of the Data Protection Act, 2019, including the contractual protections and security standards in our agreement with the provider.

How long we keep it

• Enquiries that do not become instructions — deleted within 12 months.
• Subscription details — kept until you unsubscribe.
• Client files — retained for the period required by law and by our professional obligations, and then securely destroyed.

How we protect it

Enquiries are delivered directly into the firm's Microsoft 365 mailboxes, which are protected by enterprise security controls including encryption in transit and at rest, multi-factor authentication and access restricted to those who need it. This website is served over an encrypted (HTTPS) connection. Everything you tell us is additionally protected by the duty of confidentiality owed by advocates to their clients.

Cookies and this website

This website does not use advertising or tracking cookies, and we do not run third-party analytics or advertising scripts. Two things on the site do involve other providers:

• Photographs are loaded from an external image service, which receives your IP address as part of serving the image.
• The map on our contact page is embedded from Google Maps, which may set its own cookies when the page loads. Google's own privacy policy governs that use.

Your rights

Under the Data Protection Act, 2019 you have the right to:

• be informed of how your personal data is being used;
• access the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete data we no longer have a lawful reason to keep;
• object to, or ask us to restrict, how we use your data; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, write to legal@drcokenyaririadvocatesllp.africa. We will respond within the timelines set by the Act. Some rights are limited where we are required to retain information by law, by court rules, or by our professional obligations to current and former clients.

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner.

Contact us

DRCO Kenyariri Advocates LLP
105 Sandalwood Garden, Argwings Kodhek Road
P.O. Box 2121-00202 KNH
Nairobi, Kenya
Data protection enquiries: legal@drcokenyaririadvocatesllp.africa
General: info@drcokenyaririadvocatesllp.africa · +254 (0) 20 22 48 942

We may update this notice from time to time. The date above shows when it was last revised. See also our legal disclaimer.