Privacy Notice

Our law firm offers legal representation and consultancy services in IT law. IT law covers areas such as IT Contracts and E-commerce, Data Protection, Legal Steps for Tech Startups, Intellectual Property in Information and Technology, Artificial Intelligence and Digital Evidence, Computer Forensics, and Cybercrime. This privacy notice explains how our firm uses the personal data we collect when you use our website.

1. What Personal Data Do We Collect?

• Contact details: Name, Email address, and Telephone number.

2. How Do We Collect Your Personal Data?

• Book a consultation online for our services through email; or
• Contact us through WhatsApp.

3. How Will We Use Your Personal Data?

• Process your request for our services;
• Deliver legal and consultancy services; and
• Conduct business administration purposes.

Where you engage the legal services of our law firm, your personal data may be shared with third parties who are part of the legal work, such as regulators, courts, and opposing counsel.

4. What Are the Legal Bases for Processing Your Data?

• Consent of the data subject: The consent you provide to us at the point of collection.
• Right to withdraw consent: Where consent is the basis for processing, individuals retain the right to withdraw consent at any time.
• Contractual Necessity: The performance of the contract we have with you.
• Legal Obligation: Compliance with a legal obligation to which we are subject.
• Legitimate Interest: Processing personal data where necessary for improving service delivery.

5. How Is Your Data Kept Secure?

• Client forms and records are secured in locked filing cabinets.
• Client communication through email is safeguarded using encrypted and password-protected email services.

6. What Are Your Data Protection Rights?

You have the following rights regarding your personal data:

• The right to access: You may request disclosure of the personal data we have collected about you.
• The right to restrict processing: You may restrict the use of your data where:
  • You contest the accuracy of your data;
  • Your data has been unlawfully processed and you request restriction instead of erasure;
  • Your data is no longer needed but must be retained to establish, exercise, or defend a legal claim; or
  • You have objected to processing and the firm is considering legitimate grounds that override your interests.
• The right of rectification: You may request correction of inaccurate information or completion of incomplete data.
• The right of erasure: You may request deletion of your personal data where:
  • The data is no longer necessary for the purpose collected;
  • You withdraw your consent;
  • You object to processing and no overriding legitimate interest exists;
  • Processing is for direct marketing purposes;
  • Processing is unlawful; or
  • Erasure is required to comply with a legal obligation.
• The right to object to processing: You may object to processing of your personal data. This right is not absolute. If your request is declined, the firm will inform you of the reasons and your right to lodge a complaint with the Office of the Data Protection Commissioner.

If you make a request, we have 14 days to respond. To exercise any of these rights, please contact us at:
Email: info@wanjikujoycompanyadvocates.co.ke
Phone: +254743257967

7. Data Breach Notification

In the event that a data breach poses a significant risk to your rights, the law firm will notify you promptly.

8. Changes to Our Policy

Our law firm keeps its privacy policy under regular review and posts updates on this webpage. This policy was last updated on 3rd October 2025.

---

Wanjiku Joy & Company Advocates
Nakuru, Kenya
+254743257967
info@wanjikujoycompanyadvocates.co.ke