Privacy and Data Protection Policy

2.1. Our Statement

EMET Chambers is a law firm practicing under the laws of the Republic of Kenya and is authorized and regulated by the Law Society of Kenya (LSK) to practice under the registered partnership name Ogutu, Onyiego & Partners Advocates LLP.

We are committed to safeguarding the privacy and personal data of our clients, contacts, and website visitors. This policy outlines how we collect, process, secure, and retain your personal data in compliance with the Data Protection Act, CAP 411C (Kenya) and, where applicable, foreign statutes/laws in relation to our cross-border operations.

2.2. Data Controller and Contact

Ogutu, Onyiego & Partners Advocates LLP is the data controller responsible for your personal data. If you have any questions regarding this policy, please contact us via our email address.

2.3. Information We Collect

We may collect and process the following categories of data: Identity Data (names, titles, organizations), Contact Data (emails, physical addresses, phone numbers), Technical Data (IP addresses, browser types, operating systems), Usage Data (website interaction analytics), and Marketing Data (communication preferences).

2.4. Lawful Basis for Processing

We will only use your personal data when the law allows us to do so. We rely on the following legal bases:

2.5. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling purposes that produce legal or similarly significant effects concerning you. All decisions impacting our clients and matters are subject to human review by our legal professionals.

2.6. International Data Transfers

Due to the international nature of our practice, we may share your personal data with our trusted global partners, foreign counsel, or secure cloud service providers located outside of Kenya. Whenever we transfer your personal data across borders, we ensure a similar degree of protection is afforded to it by utilizing safeguards such as Standard Contractual Clauses or ensuring the destination country has adequate data protection laws.

2.7. Data Security and Confidentiality

Client confidentiality is the cornerstone of our practice. We have implemented robust technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. Access to your personal data is strictly limited to those employees, agents, and contractors who have a business need to know and are bound by strict professional duties of confidentiality.

2.8. Data Breach Procedures

In the unlikely event of a suspected data security breach, we have procedures in place to manage and mitigate the incident. We will notify you and the Office of the Data Protection Commissioner (ODPC) of a breach where we are legally required to do so.

2.9. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, regulatory, or reporting requirements.

2.10. Your Legal Rights

Subject to applicable data protection laws, you have the right to request access, correction, erasure, restriction, transfer, or to object to the processing of your personal data. To exercise any of these rights, please contact us via email.

Additionally, you may also opt out of receiving our marketing communications at any time by clicking the 'unsubscribe' link in any email we send you.

2.11. Changes to this Privacy Policy

We regularly review our privacy practices. This policy may be updated periodically to reflect changes in the law or our data processing activities. We encourage you to review this page occasionally to stay informed of how we are protecting your data.