Last Updated: April 14, 2025
1. Introduction
Kenya Keystone Consulting ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and share your personal information when you visit our website, use our services, or interact with us in any way.
We comply with the Data Protection Act, 2019 of Kenya and other applicable data protection laws. By using our website or services, you consent to the practices described in this Privacy Policy.
2. Information We Collect
We may collect the following types of information:
2.1 Personal Information
Personal information is data that can be used to identify you directly or indirectly. We may collect:
- Contact information (name, email address, phone number, postal address)
- Professional information (job title, company name)
- Identity verification information (when required by law)
- Financial information (for payment processing, if applicable)
- Communication records (emails, phone calls, messages)
2.2 Non-Personal Information
We also collect non-personal information that does not directly identify you, including:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, time spent on the website, links clicked)
- Location information (country, city)
- Referral sources (how you found our website)
3. How We Collect Information
We collect information through various channels:
3.1 Direct Collection
- When you fill out forms on our website
- When you communicate with us via email, phone, or in person
- When you subscribe to our newsletters or marketing communications
- When you participate in surveys or provide feedback
3.2 Automatic Collection
- Through cookies and similar technologies (see our Cookie Policy)
- Through server logs and analytics tools
- Through third-party services that help us analyze website traffic
3.3 Third-Party Sources
- Business partners or service providers
- Publicly available sources
- Social media platforms (if you connect your account to our services)
4. How We Use Your Information
We use your personal information for the following purposes:
4.1 Providing Services
- To deliver the real estate consulting services you request
- To process and fulfill inquiries and transactions
- To communicate with you about our services
- To provide customer support and respond to your questions
4.2 Improving Our Services
- To analyze and improve our website and services
- To conduct research and development
- To monitor and analyze usage patterns and trends
- To enhance user experience and functionality
4.3 Marketing and Communications
- To send you marketing communications (with your consent)
- To provide you with newsletters and updates
- To invite you to events or webinars
- To conduct surveys and collect feedback
4.4 Legal and Security Purposes
- To comply with legal obligations and regulatory requirements
- To protect our rights, privacy, safety, or property
- To detect and prevent fraud, security breaches, or other harmful activities
- To enforce our terms of service or other agreements
5. Legal Basis for Processing
Under Kenyan data protection law, we process your personal information based on one or more of the following legal grounds:
- Consent: When you have given clear consent for us to process your personal information for a specific purpose.
- Contract: When processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation: When processing is necessary to comply with a legal obligation to which we are subject.
- Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
6. Data Sharing and Disclosure
We may share your personal information with the following categories of recipients:
6.1 Service Providers
We share information with third-party service providers who perform services on our behalf, such as:
- IT and cloud service providers
- Customer relationship management systems
- Email and communication platforms
- Analytics and marketing providers
- Payment processors (if applicable)
6.2 Business Partners
We may share information with business partners for the purpose of providing our services or as part of joint marketing efforts (with your consent where required).
6.3 Legal Requirements
We may disclose your information when required by law, legal process, or government request, or to protect our rights, property, or safety, or the rights, property, or safety of others.
6.4 Corporate Transactions
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.
7. International Data Transfers
We primarily store and process your personal information in Kenya. However, some of our service providers may be located in other countries. When we transfer your personal information outside of Kenya, we ensure appropriate safeguards are in place to protect your information, including:
- Transferring to countries that have been deemed to provide an adequate level of protection for personal data
- Using specific contracts approved by relevant authorities that give personal data the same protection it has in Kenya
- Obtaining your explicit consent for the proposed transfer after informing you of the possible risks
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider:
- The amount, nature, and sensitivity of the personal information
- The potential risk of harm from unauthorized use or disclosure
- The purposes for which we process the information and whether we can achieve those purposes through other means
- The applicable legal, regulatory, tax, accounting, or other requirements
When we no longer need your personal information, we will securely delete or anonymize it.
9. Your Rights
Under Kenyan data protection law, you have the following rights regarding your personal information:
- Right to Access: You have the right to request a copy of the personal information we hold about you.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal information we hold about you.
- Right to Erasure: You have the right to request deletion of your personal information in certain circumstances.
- Right to Restrict Processing: You have the right to request restriction of processing of your personal information in certain circumstances.
- Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
- Right to Object: You have the right to object to processing of your personal information in certain circumstances, including for direct marketing purposes.
- Right to Withdraw Consent: Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Encryption of personal data where appropriate
- Regular testing and evaluation of the effectiveness of our security measures
- Access controls and authentication procedures
- Regular security assessments and staff training
- Business continuity and disaster recovery plans
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers.
12. Third-Party Links
Our website may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, content, or security of these third-party sites. We encourage you to read the privacy policies of any third-party sites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically.
If we make material changes to this Privacy Policy, we will notify you by email or by posting a notice on our website prior to the effective date of the changes.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Kenya Keystone Consulting
4th Floor Westcom point,
2nd Floor Mahiga Mairu Ave,
Nairobi, Kenya
Email: [email protected]
Phone: +254709194000
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.
