Who is responsible. Boniface Mwalii, trading through Hove Consulting, Nairobi, Kenya, is the data controller for information collected on this website. Contact: talkto@bonifacemwalii.co.ke.
What we collect
- Contact form: your name, email address, organisation, enquiry type, message, and event date or location when your enquiry type asks for them.
- Newsletter subscription: your email address and the interest topics you choose, confirmed by a double opt-in link.
- Server logs: standard technical records such as IP address, browser type and time of request, kept by our hosting provider for security and reliability.
We do not run advertising or profiling cookies, and we do not buy or sell personal data.
Why we use it
- To reply to your enquiry and, where relevant, prepare a proposal. The lawful basis is our legitimate interest in responding to people who contact us, or steps taken at your request before a contract.
- To send the Insights newsletter, on the lawful basis of your consent, which you withdraw with one click in any email.
- To keep the site secure and available, on the lawful basis of legitimate interest in operating the service you asked to use.
Who we share it with
Information is processed by our hosting and email providers under our instructions, and by nobody else. We never sell your data. We disclose it only where Kenyan law requires it.
How long we keep it
- Enquiries: up to 24 months from our last exchange, so we can follow up on ongoing work.
- Subscribers: until you unsubscribe, after which only a suppression record so we do not email you again by mistake.
- Server logs: according to our hosting provider’s retention schedule, currently 30 days.
Your rights
Under the Kenya Data Protection Act, 2019 you may request access to the data we hold about you, ask for correction or deletion, object to or restrict processing, and withdraw consent at any time. Email talkto@bonifacemwalii.co.ke and we will respond within 30 days. If you are not satisfied, you may complain to the Office of the Data Protection Commissioner.
Changes to this policy
When practices change, this page is updated and the revision date below is advanced. Last updated: October 2026.
See also the data protection notice for the forms specifically, and the terms of use for the rules of using this site.