We handle personal information with care and use it for clear, limited purposes. This notice applies to the public website and its online enquiry and assistant features. It does not replace any separate engagement terms or professional duties that may apply when you become a client.
01 / Responsibility
Who we are
Njeru Nderitu & Co. Advocates is responsible for personal information collected through this website. The firm is based at Karen, Tana House, 4th Floor, Suite 405, Nairobi, Kenya.
For privacy questions or requests, contact us at [email protected], call +254 704 000 717, or write to P.O. Box 14594-00100, Nairobi.
02 / Information
Information we handle
The information depends on how you use the site. It may include:
- Consultation enquiries: your name, phone number, email address, selected area of law, optional preferred appointment date and time, and the message you choose to provide.
- Direct contact: information you include in an email, phone call or message to the firm.
- Counsel conversations: questions you type and a short recent conversation history used to answer follow-up questions.
- Technical, security and analytics information: basic connection and browser details, page-view information and performance measurements that service providers may process to deliver and protect the site and help us understand how it is used.
Please do not enter passwords, full identity numbers or highly confidential documents in the public consultation form or Counsel chat. A message may contain sensitive details about you or another person; share only what is needed for an initial enquiry.
03 / Use
How we use information
We use information to review and respond to enquiries, arrange requested consultations, communicate with you, maintain the security and operation of the website, understand aggregate website use and performance, and meet applicable legal or professional obligations. We do not use consultation enquiries for advertising or sell personal information.
Depending on the activity, processing is based on your consent (including the contact consent on the consultation form), steps taken at your request before a possible engagement, the firm’s legitimate interests in operating and securing its services, or a legal obligation. Where processing relies on consent, you may withdraw it by contacting us; this does not affect processing that already took place.
Automated assistance
Some website features use automated language tools to prepare a short administrative summary of a consultation message or respond to questions sent to Counsel. The relevant text and limited recent conversation context may be processed by service providers supporting these features. These tools provide assistance and general information; they do not decide whether the firm will take a matter or provide legal advice. A person at the firm reviews consultation enquiries.
Submitting an enquiry does not by itself create an advocate-client relationship. Please wait for the firm to confirm engagement before sending confidential case documents.
04 / Recipients
Who may receive information
We share information only as needed to provide the website and respond to you, or where required or permitted by law. Depending on the feature used, it may be handled by providers in these categories:
- Website operations, security and analytics: providers that host, maintain and protect the website, and Cloudflare, which processes page-view and performance measurements for Web Analytics reports.
- Enquiry delivery: providers that transmit consultation requests and related notifications to the firm.
- Automated assistance: providers that process relevant text to prepare summaries or responses for website features.
- External communications: if the consultation flow opens a pre-filled message in an external messaging service, you decide whether to send it. That service’s privacy terms apply when you use it.
Providers handle information to supply their services and are subject to applicable data-protection requirements. We may also disclose information to meet a legal obligation, protect rights or safety, or establish, exercise or defend a legal claim. Contact us for more information about the providers involved in a particular feature and any applicable transfer safeguards.
05 / Location
International processing
Some service providers operate or process information in more than one country. This means information submitted through the site may be processed outside Kenya. Where a transfer occurs, it must meet the requirements of sections 48 and 49 of Kenya’s Data Protection Act, including applicable safeguards for the information. Contact us if you would like more information about a particular transfer.
06 / Retention
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose it was collected, including handling your enquiry and any follow-up. If an engagement begins, relevant records may be retained for the period required by legal, professional, accounting or claims-related obligations. We review information and delete, anonymise or securely dispose of it when it is no longer needed, unless the law requires or permits longer retention.
Counsel keeps a limited recent conversation history in your browser to respond to follow-up questions. You can clear it using the “Clear chat” control; it is generally removed when the browser session ends. Service providers may keep operational records under their own retention practices.
07 / Browser data
Cookies and browser storage
The website does not use advertising or analytics cookies. Cloudflare Web Analytics uses a JavaScript beacon to measure page views and performance; it does not use cookies or browser storage. Counsel temporarily keeps a limited conversation history in your browser so it can respond to follow-up questions; this is functional storage for the feature, not advertising or analytics tracking. You can clear the history in the chat or clear site data in your browser settings. If our use of cookies or similar storage changes, we will update this notice.
08 / Your choices
Your data protection rights
Under Kenya’s Data Protection Act, you may have the right to be informed about use of your information, request access, object to processing, request correction of inaccurate information, and request erasure where the law allows. You may also request restriction of processing or portability where applicable. These rights are subject to legal conditions and exceptions.
To make a request, email [email protected] with “Privacy request” in the subject. We may ask for information needed to confirm your identity and locate the relevant records. You may complain to Kenya’s Office of the Data Protection Commissioner at [email protected] or through the ODPC website.
09 / Safeguards
Security and children
We use appropriate technical and organisational measures to protect information, including secure connections and access controls. No online transmission or storage method can be guaranteed completely secure. If a personal-data breach occurs, we will take the steps required by applicable law, including notifying affected people and the Data Commissioner where required.
This website is not directed to children. Please do not submit a child’s personal information unless it is necessary for an enquiry. Where the firm processes a child’s information, it will apply the consent and safeguards required by Kenyan law, including the child’s best interests.
10 / Contact
Questions or complaints
For questions about this notice or how information is handled, contact Njeru Nderitu & Co. Advocates at [email protected] or +254 704 000 717.
This notice is informed by Kenya’s Data Protection Act, 2019 and the ODPC regulatory framework. We may update the notice when the site or our data practices change. The current version and effective date will appear on this page.