Last updated on March 8th, 2025
Chapter 1
Who we are
Kubwa and Company Advocates is a law firm offering legal services in Kenya and is duly registered and regulated according to the Laws of Kenya under Registration number BN-YZCLK3VM.
We are committed to protecting the privacy of our website visitors. We will also secure all Personal Data you share with us in compliance with the data protection laws.
Definitions
In this Privacy Policy, unless the context requires otherwise, the following words and expressions bear the meanings assigned to them and cognate expressions bear corresponding meanings –
1:1 “Child” in the Republic of Kenya, means any natural person under the age of 18 (eighteen) years; and where the child is in the European Union, means any natural person under the age of 16 (Sixteen) years;
1:2 “Data Controller” means a person or entity that collects and determines how your personal data will be used;
1:3. “Data Processor” means the entity that carries out the processing of data on behalf of the data controller;
1:4 “Data Subject” means any individual person who can be identified, directly or indirectly to whom Personal Data relates;
1:5 “Employees” means any employee of the Kubwa & Company Advocates;
1:6 “Personal Data” means any information about: an identified natural person; or an identifiable natural person, that is, a natural person who can be identified directly or indirectly, by reference to an identifier that relates to them such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person;
1:7 “Regulator” means The Office of the Data Protection Commissioner (ODPC) -Kenya
1:8 “Website” means the Kubwa Advocates website currently located at www.kubwaadvocates.com
Chapter 2
Collection of Information
2:1 We may collect Personal Data from you through this website. This is except where the law allows us to collect it from other sources.
2:2 We may collect these types of Personal Data: your name, business contact details, photo, and job title. If you are a client, potential client, or employed by one, we may also collect your expertise and interests. We may collect other Personal Data, where relevant. This includes, for example, your membership in professional associations or boards. In rare cases, it may also include financial information. We may also collect other Personal Data directly from you. This is unless the law allows us to collect it from other sources. We may do this while providing legal services to you, your employer, or others based on later interactions with you.
2:3 We collect Personal Data when we (or propose to) deal with, or market our services to, you, a client, or someone employing you. Under the data protection laws, we inform you of the following:
[A] your rights as the subject of the personal data which we collect from you;
[B] the fact that we are collecting your personal data from you;
[C]the purpose for which we will collect your Personal Data, including why and how we will use it;
[D] the third parties who will receive your personal data including details of safeguards adopted;
[E] the contacts of the data controller or data processor who will process your Personal Data;
[F] technical and security measures concerning integrity and confidentiality of the data;
[G] whether the collected data is voluntary or mandatory; and
[H] the consequences where the data subject fails to provide all or any part of the requested data
2:4 If you apply for a job with us, we may collect some Personal Data from you. This includes your name, contact details, and work history.
2:4:1 We may also collect your Personal Data from: relevant records checks, any recruitment consultant, and your previous employers and universities.
2:4:2 They may provide information to help us decide whether to offer you a job. We will, if possible, notify you if we collect your Personal Data from sources other than you. This applies to the job application process and other instances. By applying for a job with us, you consent to our collecting your Personal Data from other sources to evaluate your application.
2:4:3 If we ever collect your Personal Data from other sources, we will, if practicable, notify you before we do so. This applies only in contexts other than your job application with us.
2:4:4 We only collect Personal Data from this website when you provide it voluntarily. For example, when you fill in a form on the careers section, subscribe to our publications, or register for a seminar. If we must collect Personal Data under any law, we will notify you before collecting it.
2:4:5 We also obtain Personal Data from your IP address, operating system and web browser that you use to access our website. We use cookies on our website. Click here for more information about our Cookies Policy.
Chapter 3
Purpose of Collection and Use of Personal Data
Once collected, we may use your Personal Data in a variety of ways including, but not limited to:
3:1 service messages, such as: bill reminders, order confirmations, programme registrations, and client service messages;
3:2 responding to your emails or online requests for products, services or information;
3:3 delivering and processing surveys;
3:4 personalising and improving the usability of this website;
3:5 fulfilling and/or delivering our products and services;
3:6 tailoring content, advertising and marketing to you;
3:7 sharing your Personal Data with some third parties to fulfil your service requests. We may share such information with service providers that do business functions for us.
Chapter 4
Sharing your information
4:1 We may need to share your info with Kubwa and Company Advocates members, offices, affiliates, and related firms in Africa, and our service providers. We will only disclose your Personal Data if you consent. We may also do so if required by law. We can also disclose it to use or defend legal rights, or in connection with legal proceedings.
4:2 We may share e-mail addresses with third parties. It’s necessary for them to perform certain services on our behalf. These include packaging, mailing, and delivering products to you. They also include processing event registrations and responding to your service requests.
4:3 Some of your Personal Data may be stored in a cloud, inside or outside Kenya. A third-party service provider manages it. If we transfer your Personal Data outside Kenya, we will take reasonable steps to secure it. We will ensure the transfer method provides adequate safeguards.
4:4 We use reasonable security measures to protect against unauthorised access to, or alteration, disclosure, or destruction of, data. Unfortunately, no Internet data transmission is 100% secure. We cannot guarantee the security of any information you send us, or to or from our online products or services.
4:5 This Privacy Policy provides that Kubwa and Company Advocates may process information, including Personal Data, provided through this website. This includes collecting, using, sharing, and safeguarding it.
4:6 This Privacy Policy may change regularly. We reserve the right to amend the Privacy Policy at any time. The date of the last revision to the Privacy Policy will be indicated by the “Last Updated” date at the top of this page.
Chapter 5
Children’s Privacy
We do not aim any of our products or services directly at children, and we do not knowingly collect personal information from children.
Chapter 6
IT Security
6:1 We use up-to-date data storage and security systems to hold your Personal Data securely, in both electronic and physical forms. This protects your info from unauthorized access, misuse, and loss. Our IT usage and security policy is supported by various security standards, processes and procedures. Our premises are access controlled and our electronic databases require logins and password authentication.
6:2 All our partners, staff and third party service providers who have access to confidential information (including Personal Data) are subject to confidentiality obligations.
Chapter 7
Your Rights under data protection laws
You have certain rights that you can exercise in relation to any of your Personal Data that we process under data protection laws. These are:
7:1 the right to be informed of the use of your Personal Data;
7:2 the right to access your Personal Data in a timely manner;
7:3 the right to object to the processing of all or part of your Personal Data;
7:4 the right to the correction of any false or misleading parts of your Personal Data;
7:5 the right to erasure of your Personal Data;
7:6 the right to data portability: receive your personal data in a structured, commonly-used, machine-readable format. You can transmit it from us to another data controller or processor without hindrance;
7:7 the right to restrict processing of your Personal Data: not to be subject to a decision based solely on automated processing that has legal effects or significantly affects you;
7:8 the right to rectify any inaccurate, outdated, incomplete, or misleading parts of your Personal Data.
7:9 In rare cases, you may have consented to the collection, processing, and transfer of your Personal Data for a specific purpose. You have the right to withdraw your consent for that purpose at any time. Once the firm gets your withdrawal notice, we will stop processing your data for the agreed purposes, unless we have a legal basis to do so.
Chapter 8
Disclaimer
This privacy policy supplements other legal notices published on our website www.kubwaadvocates.com and privacy policies and is not intended to override them. You have the right to make a complaint at any time to the Office of the Data Protection Commissioner (ODPC) the Kenyan regulator for data protection issues (https://www.odpc.go.ke/file-a-complaint/). We would, however, appreciate the chance to deal with your concerns before you approach the ODPC, so please contact us in the first instance.
Chapter 9
Contact Information
9:1 For more info on this privacy policy, please contact the Kubwa and Company Advocates Team at [email protected]. You can visit our contact page for details on how to reach us.
9:2 To exercise any of these rights, please contact us in writing. If you would like to exercise any of these rights, please contact us in writing by emailing [email protected] or by letter to:
Kubwa and Company Advocates Management Team,
Maa Towers, Narok-Nairobi Highway
P.O. Box 605-20500,
Narok, Kenya