MANASSEH & COMPANY ADVOCATES

Tana House, 3rd Floor, Suite 316, Karen Close, Nairobi, Kenya

mcadvocates.law@gmail.com  |  +254 702 216 633

PRIVACY POLICY

Effective Date: April 2025  |  Last Updated: April 2025

1. Introduction

Manasseh & Company Advocates (“the Firm”, “we”, “us”, or “our”) is committed to protecting your privacy and the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or engage with our legal services.

By using our website or contacting us, you consent to the practices described in this Policy. We comply with the Kenya Data Protection Act, 2019 and applicable data protection regulations.

2. Information We Collect

2.1 Information You Provide

• Full name, email address, phone number, and postal address
• Details submitted through our contact or enquiry forms
• Information shared during legal consultations or correspondence
• Identity documents required for client onboarding and KYC compliance

2.2 Information Collected Automatically

• IP address, browser type, and device information
• Pages visited, time spent on the site, and referring URLs
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide legal advice or representation
• To perform client due diligence and comply with anti-money laundering obligations
• To manage our client relationships and maintain legal files
• To improve our website functionality and user experience
• To send relevant legal updates or firm announcements (with your consent)
• To comply with our legal, regulatory, and professional obligations

4. Legal Basis for Processing

We process your personal data on the following lawful bases under the Kenya Data Protection Act, 2019:

• Consent: Where you have given us explicit permission to process your data
• Contractual necessity: To fulfil a contract or take pre-contractual steps at your request
• Legal obligation: To comply with applicable laws and professional regulations
• Legitimate interests: To operate and improve our firm’s services, provided these interests do not override your rights

5. Disclosure of Your Information

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• With professional advisors, co-counsel, or third-party service providers acting on our instructions
• With regulatory authorities, courts, or government bodies where required by law
• With your explicit consent, or at your direction
• In connection with a merger, acquisition, or restructuring of the Firm, subject to confidentiality obligations

All third parties with whom we share data are required to handle it in accordance with applicable data protection law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy, or as required by law. Legal files and client records are typically retained for a minimum of seven (7) years following the conclusion of a matter, in accordance with professional obligations. After this period, data is securely deleted or anonymised.

7. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small data files placed on your device. We use:

• Essential cookies: Required for the website to function properly
• Analytics cookies: To understand how visitors interact with our website

You may disable cookies through your browser settings; however, doing so may affect certain features of our website.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include secure email communication, access controls, and encrypted storage. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

• Right of access: To request a copy of the personal data we hold about you
• Right to rectification: To request correction of inaccurate or incomplete data
• Right to erasure: To request deletion of your data, subject to legal obligations
• Right to object: To object to processing based on legitimate interests
• Right to restrict processing: To request that we limit how we use your data
• Right to data portability: To receive your data in a structured, machine-readable format

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 12.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies independently.

11. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in law, regulation, or our practices. Any updates will be posted on our website with a revised effective date. We encourage you to review this Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: