Privacy Policy

1. Introduction

Aluga Advocates ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website alugaadvocates.com, use our services, or communicate with us.

This policy complies with the Data Protection Act, 2019 (Kenya), the General Data Protection Regulation (GDPR) where applicable, and other relevant data protection laws.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you provide directly to us, including:

• Contact Information: Name, email address, phone number, postal address
• Professional Information: Company name, job title, business information
• Communication Content: Messages, inquiries, feedback sent through our contact forms or email
• Job Application Data: CV, cover letter, references, qualifications, employment history
• Legal Matter Information: Details about legal issues, case information, documentation (when you engage our services)

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information:

• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Device Information: IP address, browser type, operating system, device type
• Cookies and Tracking: Session data, preferences, analytics information (see our Cookie Policy)
• Location Data: General geographic location based on IP address

2.3 Information from Third Parties

We may receive information about you from:

• Professional referrals and recommendations
• Public databases and registries
• Social media platforms (if you interact with us there)
• Business partners and service providers

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Legal Services

• Providing legal advice, representation, and services
• Communicating about your legal matters
• Preparing legal documents and correspondence
• Conducting legal research and case preparation
• Complying with professional obligations and legal requirements

3.2 Business Operations

• Responding to inquiries and requests
• Processing job applications
• Managing client relationships
• Sending newsletters and legal updates (with your consent)
• Improving our website and services
• Conducting internal business analysis

3.3 Legal Compliance

• Complying with legal obligations and regulatory requirements
• Preventing fraud and ensuring security
• Enforcing our terms and conditions
• Protecting our legal rights and interests

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your data for specific purposes
• Contract: Processing is necessary to perform our legal services contract with you
• Legal Obligation: Processing is required to comply with legal and regulatory obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, security)
• Vital Interests: Processing is necessary to protect vital interests

5. How We Share Your Information

We may share your information with:

5.1 Service Providers

• IT service providers (website hosting, email services)
• Document management and storage providers
• Payment processors
• Professional advisors (accountants, auditors)

5.2 Legal and Regulatory Authorities

• Courts and tribunals
• Law Society of Kenya
• Law enforcement agencies
• Regulatory bodies and government authorities

5.3 Other Parties

• Opposing counsel and other parties in legal matters (as necessary)
• Expert witnesses and consultants
• Corporate transaction parties (in case of merger, acquisition, or sale)

Note: We require all third parties to respect the security of your data and treat it in accordance with applicable laws. We do not allow our service providers to use your personal data for their own purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Secure servers and encrypted storage
• Access controls and authentication
• Regular security assessments and updates
• Employee training on data protection
• Confidentiality agreements with staff and service providers

Important: While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

• Client Files: 7 years after case closure (as required by Law Society of Kenya)
• Financial Records: 7 years (as required by tax law)
• Job Applications: 2 years from application date
• Marketing Data: Until you withdraw consent or request deletion
• Website Analytics: 26 months (Google Analytics default)

After the retention period expires, we securely delete or anonymize your data unless we are required by law to retain it longer.

8. Your Rights

Under the Data Protection Act, 2019 and GDPR, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (doesn't affect prior processing)
• Right to Lodge a Complaint: Contact the Office of the Data Protection Commissioner (Kenya)

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information, please see our Cookie Policy.

You can control cookies through your browser settings, but disabling them may affect website functionality.

10. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.

11. International Data Transfers

Your data may be transferred to and processed in countries outside Kenya, including:

• Cloud storage providers (may use servers in multiple countries)
• Email service providers
• Analytics platforms

When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the EU Commission.

12. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

15. Supervisory Authority

If you have concerns about how we handle your data, you may lodge a complaint with: