Privacy Policy

1. Introduction and Data Controller

This Privacy Policy explains how DIANA WANJIKU WAMBUI ("DIANA WANJIKU WAMBUI", "we", "us") collects, uses and protects personal data belonging to visitors of this website and clients of our services. DIANA WANJIKU WAMBUI, of 47 Othaya Road, 00100, Nairobi, Kenya, Kenya, is the data controller responsible for this processing. You can reach us at [email protected] with any questions about this policy.

2. What Data We Collect

We collect personal data in two main ways: information you provide directly, and information collected automatically through cookies once you consent to them.

Data Category	Purpose	Legal Basis
Name, email, phone, message (contact form)	Responding to your enquiry	Consent / Contract
Cookie identifiers	Site functionality, analytics, personalisation	Consent

3. Purposes and Legal Basis

We process your data to respond to enquiries submitted through our contact form, to deliver the services you request, and, where you have given consent, to understand how visitors use this site. Under the Kenya Data Protection Act, 2019, our processing relies on your consent or, where applicable, the steps necessary to perform a service you have requested.

4. Data Sharing and Third Parties

We do not sell personal data. We do not share your information with third parties except where required by Kenyan law or where a service provider processes data strictly on our behalf and under confidentiality obligations.

5. Retention

We retain contact form submissions only for as long as needed to respond to your enquiry and maintain a reasonable record of client communication, after which the data is deleted or anonymised.

6. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, consistent with the standards expected under the Data Protection Act, 2019.

7. International Transfers

Where any data is processed outside Kenya by a service provider, we take steps to ensure it receives a level of protection consistent with Kenyan data protection requirements.

8. Your Rights

Under the Data Protection Act, 2019, and subject to oversight by the Office of the Data Protection Commissioner, you have the right to access the personal data we hold about you, request its correction or deletion, object to certain processing, and lodge a complaint with the Data Protection Commissioner. To exercise any of these rights, contact us at [email protected].

9. Opt-Out and Data Deletion

Providing personal data to us is always optional, though it may limit our ability to respond to a specific enquiry. You can disable non-essential cookies at any time through the Cookie Settings link in the footer. To request deletion of your data, please reach out via our contact page.