Privacy Policy

Last updated: August 23, 2026

1. Introduction

Peter Maina & Company Advocates (“the Firm”, “we”, “us”, or “our”) is committed to protecting your privacy and personal data in accordance with the Data Protection Act, 2019 (Act No. 24 of 2019) of the Republic of Kenya and any regulations made thereunder. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (www.pmlaw.co.ke) or engage our legal services.

2. Data Controller

The data controller for the purposes of this policy is:

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact information — your name, email address, telephone number, and postal address, when you contact us through our website, by email, or by telephone;
• Enquiry details — the nature of your legal enquiry or the content of any message you send us through our contact form or email;
• Newsletter subscription data — your email address, if you subscribe to our newsletter or updates;
• Usage data — information about how you use our website, including your IP address, browser type, pages visited, and time spent on the website, collected through cookies and analytics tools.

4. How We Use Your Data

We process your personal data for the following purposes:

• To respond to your enquiries and provide the legal services you request;
• To communicate with you about our services, including sending newsletters if you have opted in;
• To comply with our legal and regulatory obligations, including obligations under the Advocates Act and the Law Society of Kenya rules;
• To improve our website and the user experience through analytics;
• To protect our rights, property, or safety, or that of our clients and third parties.

5. Legal Basis for Processing

We process your personal data on the following legal bases as provided under the Data Protection Act, 2019:

• Consent — where you have given us explicit consent, such as subscribing to our newsletter;
• Contractual necessity — where processing is necessary for the performance of a contract or to take steps at your request before entering into a contract for legal services;
• Legal obligation — where we are required by law to process your data;
• Legitimate interest — where processing is necessary for our legitimate interests, provided these are not overridden by your rights and interests.

6. Data Sharing

We do not sell your personal data. We may share your data with:

• Our professional advisers and service providers who assist us in operating our website and delivering our services, subject to appropriate confidentiality obligations;
• Regulatory bodies or law enforcement agencies, where required by law or to protect our legal rights;
• Courts and tribunals, as necessary for the conduct of legal proceedings.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Client files are retained in accordance with the Law Society of Kenya's record-keeping requirements and the Limitation of Actions Act.

9. Your Rights

Under the Data Protection Act, 2019, you have the following rights:

• The right to be informed about how your personal data is being processed;
• The right to access your personal data held by us;
• The right to object to the processing of your personal data;
• The right to correction of false or misleading data;
• The right to deletion of your personal data, subject to certain exceptions.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within thirty (30) days.

10. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience and to collect usage data through Google Analytics. You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the website.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Complaints

If you believe that your data protection rights have been violated, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.

13. Contact

If you have any questions about this Privacy Policy or our data protection practices, please contact us at: