Privacy Notice

1. Who we are

Rodgers Mwangi & Company Advocates (“RMC Advocates”, “we”) is a firm of advocates at View Park Towers, 8th Floor, Utalii Street, Nairobi. We are the data controller for personal data we collect through this website, by email, by WhatsApp and in the course of acting for clients. This notice explains how we handle that data in line with the Data Protection Act, 2019 (No. 24 of 2019).

2. What we collect

• Contact details you give us: name, email address, phone or WhatsApp number and postal address.
• Information about your matter that you send through our Submit Instructions form, email, WhatsApp or in meetings, including documents.
• Identification and verification documents we are required to obtain before acting, such as identity documents and, for organisations, registration and ownership details.
• Billing and payment records.

This website does not set its own advertising or tracking cookies. The map on our Contact page is provided by Google, which may set its own cookies under Google’s privacy policy. Our forms do not store your details on the website: they open your own email or WhatsApp application so you can review the message before sending it.

3. Why we use it

• To respond to your enquiry and assess whether we can act, including conflict checks.
• To provide legal services and communicate with you about your matter.
• To meet our legal and professional obligations, including client identification and anti-money laundering requirements, record keeping and court or regulatory requirements.
• To issue invoices and manage payments.

We rely on the performance of our engagement with you, compliance with legal obligations, our legitimate interests in running the practice, and, where required, your consent.

4. Confidentiality

Information about your matter is held in professional confidence and, where applicable, is protected by advocate–client privilege. Access within the firm is limited to the people working on your matter.

5. Who we share it with

We share personal data only where needed for your matter or required by law, for example with courts and tribunals, government registries and agencies, opposing parties and their advocates, experts, and co-counsel or overseas counsel instructed on your matter. We also use trusted service providers for email, document storage and IT, who process data on our instructions. We do not sell personal data.

6. Transfers outside Kenya

Some matters involve overseas counsel, and some of our service providers store data outside Kenya. Where personal data is transferred outside Kenya, we do so only where permitted by the Data Protection Act, 2019, with appropriate safeguards or your consent.

7. How long we keep it

We keep matter files and related personal data for as long as needed to provide our services and to meet our legal, regulatory and professional record-keeping obligations, after which they are securely deleted or destroyed. Enquiries that do not become instructions are kept only as long as reasonably necessary.

8. Security

We use organisational and technical measures, including access controls and secure document management, to protect personal data against loss, misuse and unauthorised access.

9. Your rights

Under the Data Protection Act, 2019 you have the right to be informed of how your data is used, to access it, to object to its processing, and to ask for inaccurate or misleading data to be corrected or deleted, subject to our legal obligations to retain certain records. To exercise these rights, email us at info@rmc-advocates.com.

If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner (ODPC).

10. Kenya Gazette library

Our Kenya Gazette library republishes issues of the Kenya Gazette so the public can download them and search the notices. This section explains how we handle the personal data in those notices.

• Source: the Kenya Gazette published by the Government Printer, a public record. We do not add any information to what the Gazette contains.
• What it includes: names, addresses, family relationships, property and land title details, company and appointment details, and other information appearing in gazette notices.
• Why: to make official notices easier to find, so that people affected by them can act within the time the notice allows, and as a public resource offered by the firm.
• Lawful basis: our legitimate interests and the public interest in access to official notices (section 30 of the Data Protection Act, 2019). The data is taken from a public record (section 28). We have assessed this processing in a data protection impact assessment.
• Who can see it: anyone visiting the website. Issue pages may appear in search engines such as Google.
• What we do not do: we never use Gazette notices to contact, market to or compile lists of the people named in them. Searches you run on the library happen in your own browser and are not sent to us.
• How long: we keep issues online for a limited period and review it regularly.
• Your rights: if you are named in a notice, you may ask us to correct it, object to it being shown, or ask for it to be removed from our online copy. Use the “Request removal or correction” link beside the notice, or email info@rmc-advocates.com. We respond within 14 days. Removal from our copy does not change the official Gazette.

11. Contact

Questions about this notice: info@rmc-advocates.com or +254 795 973 253.