Privacy Policy

Last updated: 3 November 2026

Maiyo & Mbugua Law Advocates LLP ("we", "us", "our") respects your privacy. This policy explains how we collect, use, share and protect personal data when you visit this website or contact us, and the rights you have under the Data Protection Act, 2019 of Kenya and the regulations made under it.

For the purposes of that Act, we are the data controller of the personal data described in this policy.

Personal Data We Collect

Information you give us. When you call, email or otherwise contact us, we receive what you choose to share. This may include your name, phone number, email address and details of your enquiry or legal matter.

Information collected automatically. When you visit this website, we and our service providers may collect technical information such as your IP address, browser and device type, the pages you visit and how you reached them. Some of this is collected using cookies and similar technologies.

Sensitive personal data. Your enquiry or matter may involve sensitive personal data, for example about your health in a personal injury matter. Please share such information only as needed. We handle it with additional care and only as the law allows.

How We Use Your Personal Data

We use personal data only for specific and lawful purposes:

To respond to your enquiries and arrange consultations.

To provide legal services, and to manage our relationship with you if you become a client.

To meet our legal, regulatory and professional obligations.

To protect the security of our website and systems.

To understand how our website is used, so that we can improve it.

Our Lawful Basis

We process personal data on one or more of the grounds permitted by the Act: your consent; performing a contract with you or taking steps at your request before entering one; complying with a legal obligation; or our legitimate interests, where these are not overridden by your rights. Where we rely on consent, you may withdraw it at any time. This does not affect processing already carried out.

Cookies and Analytics

This website uses Google Analytics to help us understand how visitors use it. Google Analytics uses cookies and processes information such as your IP address and activity on the site. You can block or delete cookies in your browser settings. Some parts of the website may not work as well if you do.

Who We Share Personal Data With

We do not sell personal data. We share it only where necessary, with:

Service providers who support our website and business, including our website hosting and email providers, and our website security software.

Google, which provides the analytics on this website, the map on our Contact page and the fonts used on this website. Loading these may send your IP address and browser information to Google.

Courts, regulators, professional advisers and other parties, where this is required by law or necessary to act on your matter.

Transfers Outside Kenya

Some of our service providers, including Google, may store or process personal data outside Kenya. Where this happens, we take the steps required by the Act to ensure that your personal data remains appropriately protected.

How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law, including our professional obligations to keep client records. When it is no longer needed, we delete it or make it anonymous.

How We Protect Personal Data

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Information about client matters is also subject to our professional duty of confidentiality. No method of transmission over the internet is completely secure, so please consider this before sending sensitive information by email.

Your Rights

Under the Data Protection Act, 2019, you have the right to:

Be informed about how your personal data is used.

Access the personal data we hold about you.

Object to the processing of all or part of your personal data.

Ask us to correct false or misleading personal data.

Ask us to delete false or misleading personal data.

Receive your personal data in a portable format, where this applies.

Withdraw your consent, where we rely on it.

To use any of these rights, contact us using the details below. We may need to confirm your identity first. Some rights are limited by law, for example where we must keep records or where information is protected by legal professional privilege.

Complaints

If you are concerned about how we handle your personal data, please contact us first so that we can try to resolve it. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya.

Children

This website is not directed at children. Where we act for a child, we process the child's personal data with the consent of a parent or guardian, or as otherwise permitted by law.

Links to Other Websites

This website links to other sites, such as our LinkedIn page and Google Maps. We are not responsible for their privacy practices, so please read their privacy policies.

Changes to This Policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

Contact Us

For questions about this policy or your personal data, please contact us:

Maiyo & Mbugua Law Advocates LLP
C.K. Patel Building, 9th Floor, Kenyatta Avenue, Nakuru
Email: info@maiyombugualaw.co.ke
Phone: +254 723 279 214