Privacy Policy

Last updated: August 13, 2026

CK Advocates (“CK Advocates”, “we”, “us” or “our”) is a law firm operating in Nairobi, Kenya. This Privacy Policy explains what personal data we collect through this website (CK Advocates’s website), why we collect it, how we use and protect it, and the rights you have over it under the Data Protection Act, No. 24 of 2019 (Kenya) (the “Act”) and its subsidiary regulations.

This policy applies only to data collected through this website. It does not cover personal data we hold as a result of an existing advocate-client relationship, which is instead governed by our engagement terms with that specific client and our professional obligations of confidentiality under the Advocates Act (Cap. 16, Laws of Kenya) and the LSK Code of Standards of Professional Practice.

Information We Collect

We collect personal data in the following ways:

• Information you submit directly. When you use the enquiry form on our Contact Us page, we collect your full name, email address, and the nature-of-matter selection you make. The company, telephone number and message fields are optional but, if completed, are also collected.
• Correspondence. If you email or call us directly, we retain that correspondence and any personal data it contains for as long as is reasonably necessary to respond to and, where relevant, act on it.
• Automatically collected technical data. Like most websites, our server automatically logs standard technical information for every visit — IP address, browser type, device type, pages viewed, and the date and time of the visit — for security and website-administration purposes.
• Cookies. This website uses only strictly necessary, functional cookies set by our website software (WordPress) and our form plugin (Contact Form 7) to make the site and its enquiry form work correctly. We do not currently use analytics, advertising, or third-party tracking cookies. If that changes, this policy will be updated first and, where required by law, your consent will be requested before any non-essential cookie is set.

We do not knowingly collect any special category of personal data (such as health, biometric, or criminal-record data) through this website. Please do not include such data in the enquiry form; if your matter requires us to receive it, we will arrange a secure and appropriate channel once we are formally instructed.

How We Use Your Information

We use the personal data described above only to:

• Respond to enquiries submitted through this website and correspond with you about a potential instruction;
• Assess and, where we accept an instruction, open and administer a client file (at which point our engagement letter and client-specific confidentiality obligations take over);
• Maintain the security, integrity, and normal technical operation of this website;
• Comply with our legal, regulatory, and professional obligations, including under the Advocates Act and the Proceeds of Crime and Anti-Money Laundering Act, where applicable to the matter you have raised.

We do not use enquiry-form data for marketing or advertising, and we do not sell, rent, or trade personal data to any third party.

Legal Basis for Processing

Under the Act, we rely on the following lawful bases, depending on the circumstances:

• Consent — when you voluntarily submit the enquiry form, you consent to us processing that data to respond to you;
• Contract — where processing is necessary to take steps, at your request, towards entering a client engagement, or to perform an engagement already in place;
• Legal obligation — where we must process data to comply with a legal or professional obligation, such as client due-diligence or court rules;
• Legitimate interest — for basic website security and administration, balanced against your rights and freedoms.

Sharing and Disclosure

We do not share your personal data with third parties for their own marketing purposes. We may share limited personal data with:

• Our website hosting and email service providers, solely to the extent necessary for them to provide those services to us, and under obligations of confidentiality;
• Courts, tribunals, regulators, or other advocates, where necessary to act on an instruction you give us or where required by law;
• Professional advisors (such as our auditors or insurers), bound by confidentiality, where necessary for our own compliance or risk management.

We do not currently transfer personal data outside Kenya in the ordinary course of operating this website. If a future service provider is located outside Kenya, we will only transfer data to that provider on a basis permitted by the Act (including, where required, an adequacy decision, appropriate safeguards, or your consent), and this policy will be updated to reflect that.

Data Retention

Enquiry-form submissions that do not result in an instruction are retained for no longer than is necessary to respond to the enquiry and for a reasonable follow-up period, after which they are deleted. Where an enquiry results in a client engagement, the resulting file is retained in line with our professional record-keeping obligations under the Advocates Act and our own file-retention policy.

Data Security

We take reasonable technical and organisational measures to protect personal data submitted through this website against unauthorised access, loss, misuse, or alteration. No method of transmission over the internet is completely secure, and while we work to protect your data, we cannot guarantee its absolute security — please avoid sending highly sensitive information through the general enquiry form.

Your Rights

Under the Act, as a data subject you have the right to:

• Be informed of the use to which your personal data is to be put (this policy is part of that);
• Access your personal data in our custody;
• Request correction or rectification of inaccurate or outdated personal data;
• Request erasure of personal data that we no longer have a lawful basis to hold;
• Object to, or restrict, the processing of your personal data;
• Withdraw consent, where consent is the basis for processing, at any time (this will not affect any processing already carried out);
• Data portability, where technically feasible;
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights under the Act have been infringed.

To exercise any of these rights in relation to data collected through this website, contact us at info@ckadvocates.co or +254 20 386 4417. We will respond within the timeframes required by the Act.

You may also contact the Office of the Data Protection Commissioner directly at www.odpc.go.ke.

Children’s Privacy

This website is intended for use by businesses and adults seeking legal services. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The “Last updated” date at the top of this page will always show the most recent revision. We encourage you to review it periodically.

Contact Us

Questions or concerns about this Privacy Policy, or requests relating to your personal data, can be sent to:

CK Advocates
5th Floor, Parklands Plaza, Ojijo Road, Parklands, Nairobi, Kenya
Phone: +254 20 386 4417
Email: info@ckadvocates.co