Privacy and Compliance Policy
Last Updated: November 2025
Effective Date: Immediately upon publication
1. Introduction
Waweru Nyambura & Co. Advocates (“the Firm”) is committed to protecting the privacy, confidentiality, and personal data of all clients, website visitors, and business partners. This Privacy and Compliance Policy outlines how we collect, use, disclose, and safeguard information in accordance with the Data Protection Act, 2019 (Kenya), the Advocates Act (Cap. 16), and the Law Society of Kenya (LSK) Code of Conduct and Ethics.
By accessing our website or engaging our legal services, you agree to the terms of this Policy.
2. Lawful Basis and Scope
This Policy applies to:
- All personal data collected through our website (www.wawerunyamburalaw.com), contact forms, email, telephone, WhatsApp, and in-office consultations.
- All staff, partners, and consultants of the Firm.
- All matters related to the processing, storage, and security of personal data held by the Firm.
Our processing of personal data is guided by the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality as set out under Section 25 of the Data Protection Act, 2019.
3. Information We Collect
We may collect the following categories of information:
- Personal Identification Data – such as your full name, contact number, email address, ID/passport number, and postal address.
- Professional and Case Information – including documents, instructions, contracts, or evidence shared with us during legal representation.
- Website Usage Data – including IP address, browser type, device identifiers, and cookies collected through our website for analytics and performance improvement.
- Communication Records – including correspondence via email, SMS, WhatsApp, or social media relating to your engagement with the Firm.
4. How We Use Your Information
Your information is used for legitimate legal and business purposes, including:
- Providing and managing legal services and representation.
- Communicating with clients and responding to inquiries.
- Fulfilling statutory obligations under Kenyan law.
- Managing billing, payments, and compliance with our client engagement terms.
- Improving website functionality and user experience.
- Complying with professional conduct rules issued by the Law Society of Kenya.
We do not sell, rent, or commercially share your personal data with third parties.
5. Confidentiality and Legal Professional Privilege
All information shared with Waweru Nyambura & Co. Advocates is treated as confidential and privileged. Disclosure will only occur:
- With your express consent; or
- Where required by a court of law or statutory authority; or
- As necessary to protect your legal interests within the scope of representation.
Our advocates and staff are bound by the Advocates (Practice) Rules and professional ethics obligations concerning confidentiality and client information.
6. Data Retention
The Firm retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal obligations, or as required under the Advocates (Accounts) Rules and related record-keeping requirements. Upon expiration of the retention period, data is securely destroyed or anonymised.
7. Data Security
We implement reasonable technical and organisational measures to protect data against:
- Unauthorised access, alteration, disclosure, or destruction.
- Loss or misuse through physical, digital, or cyber compromise.
Our website uses SSL encryption and secure storage protocols. Internal access to personal data is strictly limited to authorised personnel only.
8. Your Rights Under the Data Protection Act, 2019
As a data subject, you have the right to:
- Access your personal data held by the Firm.
- Request correction or deletion of inaccurate or outdated information.
- Withdraw consent to processing at any time (subject to legal exceptions).
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been violated.
Requests relating to your data may be directed to contact@wawerunyamburalaw.com.
9. Cookies and Analytics
Our website uses cookies and analytics tools such as Google Analytics to monitor performance and improve user experience. Cookies may collect anonymous data on user sessions, device type, and browsing patterns. You may disable cookies through your browser settings, though this may affect website functionality.
10. Compliance and Third-Party Processors
Where third-party service providers (such as IT, hosting, or email platforms) process data on our behalf, they do so under strict confidentiality and in compliance with this Policy and Kenyan data protection laws.
We ensure that all processors maintain appropriate safeguards and comply with Section 46 of the Data Protection Act, 2019.
11. External Links
Our website may contain links to other legal resources or external sites. Waweru Nyambura & Co. Advocates is not responsible for the privacy practices or content of those websites. Users are encouraged to review the privacy policies of any external websites visited.
12. Changes to This Policy
We may amend this Policy periodically to reflect legal, technological, or operational changes. Updated versions will be published on our website with a revised “Last Updated” date.
13. Contact Information
For questions or requests concerning this Privacy and Compliance Policy, please contact:
Waweru Nyambura & Co. Advocates
14. Legal References
- Data Protection Act, 2019 (Kenya Law)
- Advocates Act (Cap. 16, Laws of Kenya)
- Law Society of Kenya Code of Conduct and Ethics
- Office of the Data Protection Commissioner (ODPC) Guidelines