Privacy Notice

Effective Date: 1 January 2025

1. Introduction

  • Nexus Tech Policy Advisors (“we”) are committed to protecting the privacy and security of your personal data. This Privacy Notice explains how we collect, use, store, and share your personal information in compliance with Kenya’s Data Protection Act, 2019, and other applicable laws.

    By engaging with our services, visiting our website, or providing your personal data to us, you acknowledge that you have read and understood this Privacy Notice. This policy applies to all users interacting with us, including clients, website visitors, and any other parties who share their personal data. 

2. Data Controller

  • The data controller responsible for your personal data is:
    Nexus Tech Policy Advisors
    Located at 90 JGO, Mugumo Gardens, Lavignton, Nairobi.
  • You can contact us at: info@nexustechpolicyadvisors.com 

3. Personal Data We Collect

  • We may collect and process the following types of personal data:

    • Contact Information: Name, email address, phone number, and physical address.
    • Professional Information: Job title, company name, and professional background.
    • Financial Information: Payment details, invoices, and transaction records.
    • Technical Information: IP address, browser type, device information, and website usage data.
    • Sensitive Information: Government ID numbers, or biometric data (only when necessary and with explicit consent).
    • Other Information: Any additional information you provide to us during consultations or communications.

    • Social Media Information: When you interact with us via our social‑media profiles (e.g., following, commenting, sharing, messaging, tagging, participating in polls or contests), we collect:

      • Profile Details: public name, username/handle, profile photo, bio or “about” information.

      • Engagement Data: likes, comments, shares, reactions, hashtag usage, poll/survey responses.

      • Message Content: direct‑message text and metadata (timestamps, message status).

      • User‑Generated Content: posts, photos, videos, or stories you tag us in or submit.

      • Platform Analytics: any analytics data provided by the platform (e.g., impressions, reach).

4. How We Collect Your Personal Data

  • We collect your personal data through:
    • Direct interactions (e.g., when you contact us via email, phone, or in person).
    • Our website (e.g., through contact forms, cookies, and analytics tools).
    • Social Media (when you engage with our profiles on platforms such as X, LinkedIn, Instagram, or YouTube).
    • Third-party sources (e.g., referrals, publicly available directories, and other online platforms).

5. Purposes for Processing Your Personal Data

  • We process your personal data for the following purposes:

    • To provide you with our list of services and to fulfill our contractual obligations.

    • To communicate with you regarding our services, updates, and promotions.

    • To process payments and maintain financial records.

    • To improve our website and services based on your feedback and usage patterns.

    • To comply with legal and regulatory requirements.

    • To engage with you on social media: respond to inquiries, tailor content and offers based on your interactions, run campaigns or contests, and analyze our social‑media performance.
  • Note: We do not use your data for automated decision-making or profiling unless specifically stated.

6. Legal Basis for Processing

  • We process your personal data based on the following legal grounds:

    • Your consent (where required).
    • The performance of a contract with you.
    • Compliance with legal obligations (e.g., tax, accounting, and regulatory purposes).
    • Legitimate interests pursued by us or a third party (e.g., to improve our services or protect our business operations).

7. Sharing Your Personal Data

  • We may share your personal data with:

    • Service Providers: Third-party vendors who assist us in delivering our services (e.g., IT support, payment processors, cloud hosting services).
    • Legal Authorities: When required by law or to protect our legal rights (e.g., in response to a subpoena or other legal requests).
    • Business Partners: With your consent, for collaborative projects or referrals.
      We ensure that all third parties respect the security of your personal data and process it in accordance with the law, including implementing appropriate contractual safeguards.

8. Data Retention

  • We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements.
  • Specifically, we retain personal data for the duration of our contractual relationship with you, or as required by applicable law. When your data is no longer needed, we securely delete or anonymize it.

9. Your Rights Under the Data Protection Act

  • Under the Data Protection Act of Kenya, 2019, you have the following rights:

    • Information: Request information on how we process your data.
    • Access: Request a copy of the personal data we hold about you.
    • Rectification: Request correction of inaccurate or incomplete data.
    • Erasure: Request deletion of your personal data under certain conditions.
    • Restriction: Request restriction of processing your personal data.
    • Objection: Object to the processing of your personal data.
    • Data Portability: Request transfer of your data to another controller.
  • To exercise these rights, please contact us using the details provided in Section 13. We will respond to your request within the legally prescribed timeframe.

10. Data Security

  • We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. These measures include encryption, access controls, firewalls, and regular security assessments. We are committed to maintaining the confidentiality and integrity of your data.

11. International Data Transfers

  • If we transfer your personal data outside Kenya, we will ensure that adequate safeguards are in place to protect your data in accordance with the Data Protection Act. This may include standard contractual clauses, obtaining consent where necessary, or ensuring that the recipient country provides an adequate level of protection for your personal data.

12. Changes to This Privacy Notice

  • We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. Any changes will be posted on our website, and where appropriate, we will notify you by email. We encourage you to review this Privacy Notice periodically.

13. Contact Us

  • If you have any questions or concerns about this Privacy Notice or our data practices, please contact us at:
    Email: info@nexustechpolicyadvisors.com
    Phone: +254 743033657
    Mailing Address: P.O. BOX 54221- 00200

This website uses cookies and asks for your personal data to enhance your browsing experience. We are committed to protecting your privacy and ensuring your data is handled in compliance with the General Data Protection Regulation (GDPR).
Ok, I agree Privacy Policy