Privacy Policy

Introduction

Ngima Wangai & Company Advocates ("the Firm," "we," "us," or "our") respects your privacy and is committed to protecting the personal data of everyone who visits our website, contacts us, submits a review, or uses our Client Portal. This Privacy Policy explains what information we collect, how we use it, and the rights available to you under the Data Protection Act, 2019 of Kenya.

By using this website or our Client Portal, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the site or the portal.

Information We Collect

We collect information in the following ways:

Contact form and live chat. When you send us a message through the Contact page, we collect your name, email address or phone number, and the content of your message, so that we can respond to your inquiry.
Newsletter subscription. If you subscribe to receive updates from us, we collect your email address for that purpose. Newsletter sign-up on this site is not yet fully active; when it is, we will only use the address you provide to send the updates you asked for.
Client Portal. If you are an existing client, your name, case number, and national ID number are used to create and secure your portal account. Any documents you upload (including PDFs, images, Word documents, or videos related to your case) are stored so that we can manage your matter together.
Client reviews. If you submit a review, we collect the name you provide, your message, your star rating, and your IP address. The IP address is used only to prevent abuse of the review system and is not published.
Automatically collected information. Like most websites, our server automatically logs limited technical information such as your browser type, device type, and pages visited, and uses cookies as described in our Cookie Policy.

How We Use Your Information

We use the information we collect to:

Respond to your inquiries and provide the legal services you request;
Create, secure, and administer your Client Portal account and case documents;
Display and moderate client reviews, and prevent spam or abusive submissions;
Send you updates you have subscribed to receive;
Maintain the security, performance, and proper functioning of our website; and
Comply with our legal and regulatory obligations as an advocates' firm in Kenya.

Legal Basis for Processing

Under the Data Protection Act, 2019, we process your personal data on one or more of the following grounds: your consent (for example, when you subscribe to our newsletter or submit a review); the performance of a contract or the steps needed to enter one (for example, when we act for you as a client); compliance with a legal obligation; and our legitimate interests in operating and securing our website and practice, provided those interests do not override your rights.

We do not sell your personal data. We may share information only in the following limited circumstances:

With service providers who help us operate the website and portal (for example, hosting providers), who are only permitted to use your data to provide that service;
Where required by law, court order, or a competent regulatory authority; and
With your consent, or as otherwise disclosed to you at the point of collection.

Client Portal Data

Documents you upload to the Client Portal often relate directly to your legal matter and may be sensitive. Access to your case is restricted to you and the Firm's authorized personnel handling your matter. Once a document you have submitted is confirmed as received by our team, it can no longer be edited or deleted from your end; you may instead upload a revised version, so that a clear record of your case history is preserved. Nothing in this Policy limits the confidentiality protections that apply to communications between you and your advocate under the law of Kenya.

Data Security

We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including restricting portal access to authenticated clients and authorized staff. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including any period required to comply with our legal, regulatory, and professional obligations as an advocates' firm, after which it is securely deleted or anonymized.

Your Rights

Under the Data Protection Act, 2019, you have the right to:

Be informed of the use to which your personal data is to be put;
Access your personal data that we hold;
Request correction of inaccurate or outdated personal data;
Request deletion of your personal data, subject to our legal obligations;
Object to the processing of your personal data;
Withdraw consent at any time, where processing is based on consent; and
Lodge a complaint with the Office of the Data Protection Commissioner, Kenya, if you believe your rights have been infringed.

To exercise any of these rights, please contact us using the details at the end of this Policy.

Cookies

We use a small number of cookies necessary for the website and Client Portal to function, such as keeping you logged in and protecting forms from misuse. Full details are set out in our Cookie Policy.

Children's Privacy

Our website and services are not directed at children, and we do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this Policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: nwangailawadvocates@gmail.com
Phone: +254 714 535 492 or +254 728 472 202
Address: P.O. Box 000-00100, Nairobi, Kenya