Last updated [12th August 2024]
This privacy policy for Munyao, Muthama and Kashindi Advocates describes how and why we might collect, store, use, and/or share (“process”) your personal data when you use our services (“Services”), such as when you:
- Visit our website or any website of ours that links to this privacy
- Visit our social media pages.
- Engage with us in other related ways including any sales, marketing, or
- Opt-in to our mailing
Reading this privacy policy will help you understand your privacy rights and choices. If you have any questions or concerns, please contact us at nairobi@mmkadv.co.ke.
MMK Advocates is the controller responsible for your personal data.
This privacy policy applies to all MMK clients, suppliers, agents, dealers and all visitors in Kenya and outside Kenya visiting MMK’s website.
THE DATA WE COLLECT ABOUT YOU
Personal data you disclose to us
We collect personal data that you voluntarily provide to us when you express an interest in obtaining data about us or our services, participate in trainings and webinars organized by MMK, subscribe to our mailing list, send your job application or otherwise when you contact us or utilise any of our product offerings or services. The Data Protection Act (Cap 411C), the General Data Protection Regulation and applicable data protection laws allow us to collect personal data which you as a data subject has deliberately made public (see heading “Data Collected from Other Sources” below)
Personal Data Provided by you
The personal data that we collect depends on the context of your interactions with us and our services, the choices you make, and the products and features you use. The personal data we collect may include the following:
- Your name
- Your email address
- Your contact details
- Your place of employment
- Your CV details
Sensitive Data
When necessary, with your consent or as otherwise permitted by the Data Protection Act (Cap 411C), the General Data Protection Regulation and applicable data protection laws, we may process sensitive personal data belonging to you.
Payment Data
We may collect data necessary to process your payment if you make purchases or if you are awarded a tender by MMK, such data may include your bank account details, or other electronic or virtual payment details shared with us by you or other data controllers or processors.
Social Media Login Data
We may provide you with the option to register with us using your existing social media account details, like your LinkedIn or other Google account.
Data automatically collected
We automatically collect certain data when you visit, use, or navigate our website. This data does not reveal your specific identity (like your name or contact data) but may include device and usage data, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, data about how and when you use our services, and other technical data. This data is primarily needed to maintain the security and operation of our website, and for our internal analytics and reporting purposes.
Like many businesses, we also collect data through cookies and similar technologies. We may store some data (using “cookies”) on your computer when you visit our website. This enables us to recognise you during subsequent visits. The type of data gathered is non-personal such as the (IP) address of your computer, the date and time of your visit, which pages you browsed and whether the pages have been delivered successfully.
Data collected from other sources
We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources. We do this only to the extent permitted by the Data Protection Act (Cap 411C), the General Data Protection Regulation and applicable data protection laws and any other law.
To enhance our ability to provide relevant services to you and update our records, we may obtain data about you from other sources, such as public databases, data providers, social media platforms, and from other third parties. This data includes mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion. If you interact with us on a social media platform using your social media accounts, we receive personal data about you such as your name, email address, and gender. Any personal data that we collect from your social media accounts depends on your social media account’s privacy settings and we only collect data to the extent permitted by law.
WHEN WILL WE COLLECT YOUR DATA
We collect and process your personal data when you visit our website, sign up for our newsletter, subscribe to our mailing list or request more data about us.
LAWFUL GROUNDS FOR PROCESSING
The Data Protection Act (Cap 411C), the General Data Protection Regulation and applicable data protection laws require us to explain the valid legal bases we rely on to process your personal data. As such, we may rely on the following legal bases to process your personal data:
- We may process your data if you have given us permission/opt in to use your personal data for a specific purpose. You can withdraw your consent at any time.
- We may process your personal data to enter into a binding contract or legal agreement with you.
- Legitimate We may process your personal data when we believe it is reasonably necessary to achieve our legitimate business interests. We always make sure that our legitimate interests do not outweigh your interests and fundamental rights and freedoms.
- Legal We may process your data where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a regulatory agency, exercise or defend our legal rights, or disclose your data as evidence in litigation in which we are involved.
- Other lawful bases. We may process your personal data pursuant to any other lawful bases as set out in the Data Protection Act (Cap 411C), the General Data Protection Regulation and applicable data protection laws to the extent permitted by law.
HOW WE PROCESS YOUR PERSONAL DATA
We will only use your personal data for the purpose for which we collected it which includes the following:
- To add you to our mailing list.
- To process and deliver your
- To manage your relationship with
- To enable complete a
- To improve our website, services, marketing or client
- To recommend products or services which may be of interest to you, including upcoming webinars and published legal alerts.
HOW WE SHARE YOUR PERSONAL DATA
We may share your data with third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such data to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal data. This means that they cannot do anything with your personal data unless we have instructed them to do it. They will also not share your personal data with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The categories of third parties we may share personal data with are as follows:
- Affiliate Marketing Programs
- Cloud Computing Services
- Communication & Collaboration Tools
- Data Analytics Services
- Data Storage Service Providers
- Finance & Accounting Tools
- Regulatory entities
- Payment Processors
- Sales and Marketing Tools
- Social Networks
- User Account Registration and Authentication Services
HOW LONG WE KEEP YOUR PERSONAL DATA?
We will only keep your personal data for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by applicable law (such as tax, accounting, or other legal or contractual requirements).
When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize such data, or, if this is not possible for instance where your personal data has been stored in backup archives, then we will securely store your personal data and isolate it from any further processing until deletion is possible.
HOW WE KEEP YOUR DATA SAFE
We have implemented appropriate and reasonable technical and organizational safeguards designed to protect the security and integrity of any personal data we process. However, despite our safeguards and efforts to secure your personal data, no electronic transmission over the internet or data storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your data.
INTERNATIONAL TRANSFER OF PERSONAL DATA
Where we may need to transfer your personal information to a different jurisdiction to provide a particular service, we will make sure that your personal data is properly protected in accordance with the guidelines set in the Data Protection Act (Cap 411C), the General Data Protection Regulation and applicable data protection laws.
YOUR LEGAL RIGHTS
Withdrawing your consent: If we are relying on your consent to process your personal data, which will be express, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us using the contact details provided below.
However, please note that this will not affect the lawfulness of the processing before its withdrawal neither will it affect the processing of your personal data conducted in reliance on lawful processing grounds other than consent.
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails and SMS that we send, replying “STOP” or “UNSUBSCRIBE” to the SMS or email messages that we send, or by contacting us using the details provided in the section below. You will then be removed from the marketing lists, however, we may still communicate with you, for example to respond to service requests, or for other non-marketing purposes.
Cookies and similar technologies: Our web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.
Other Rights: The following rights also apply to you as a data subject in accordance with the Data Protection Act (Cap 411C), the General Data Protection Regulation and applicable data protection laws:
- Right to be informed that we are collecting personal data about you;
- Right to access personal data that we hold about you and request for information about how we process it;
- Right to request that we correct your personal data where it is inaccurate or incomplete;
- Right to request that we erase your personal data noting that we may continue to retain your information if obligated by the law or entitled to do so;
- Right to request restricted processing of your personal data noting that we may be entitled or legally obligated to continue processing your data and refuse your request;
- Right to request transfer of your personal data in an electronic format/right to data portability.
CONTACT DETAILS
If you have any questions about this privacy policy or our data protection practices, please contact us at
nairobi@mmkadv.co.ke or kashindi@mmkadv.co.ke. Our contact details are: Tel: +2540202117477 / +254722941694.