This notice explains, form by form, how personal data is handled on this website under the Data Protection Act, 2019 (Kenya). The wider policy, including retention and your rights, is in the privacy policy.
The contact form
- Data: name, email, organisation, enquiry type, message, and event date or location when relevant.
- Purpose: to respond to you and, where the enquiry continues, to prepare a proposal or agreement.
- Lawful basis: legitimate interest in replying to direct correspondence, or steps taken at your request before entering a contract.
- Where it goes: stored in this site’s enquiry records and emailed to the consultant. If you tick the subscribe box, your email is also added to the newsletter list after you confirm by link.
- Spam controls: submissions are rate limited per device and time-gated; a hidden field filters automated traffic. No third-party tracking is involved.
The newsletter subscription
- Data: email address and chosen interest topics.
- Purpose: sending the Insights newsletter.
- Lawful basis: consent, given when you submit and confirmed when you click the link in the confirmation email (double opt-in).
- Stopping it: every email carries an unsubscribe link, and requests are honoured immediately.
Server logs
Our host records standard technical logs, including IP address, to keep the site secure and available. These logs are not used to profile you.
Processors
Hosting and email delivery are handled by our contracted providers acting on our instructions. We do not sell personal data and do not transfer it outside Kenya except through these processors’ infrastructure.
Exercising your rights
To access, correct, delete or restrict the use of your data, or to withdraw consent, email talkto@bonifacemwalii.co.ke. We respond within 30 days. Complaints may be lodged with the Office of the Data Protection Commissioner.