Gakahu & Rosana Advocates respects your privacy and is committed to protecting personal information handled through gnlegal.online (the “Website”) and its related services (collectively, the “Services”). This Policy explains the information we may collect from you or that you provide to us, how we use it, and the choices available to you.
Information we collect
Information collected automatically
When you visit the Website, our servers and service providers may receive technical information from your browser or device. This may include your IP address, approximate location derived from that address, browser and device type, operating system, language settings, referring page, pages visited, access times and usage statistics. We use this information to operate and secure the Website, investigate potential misuse and understand general Website traffic.
Information you provide
You may use most of the Website without identifying yourself. If you contact us through the Website, we collect the name, email address and message you provide. If you subscribe to our newsletter, we collect the email address you submit to our newsletter provider. Website administrators and invited staff may also provide account details needed to administer Website content. Please do not send confidential client information or sensitive personal information through the general contact form unless we have specifically asked you to do so through an appropriate channel.
How we use information
We use personal information to respond to enquiries, assess whether and how we can assist you, send requested communications or newsletters, administer and secure the Website, prevent fraud or misuse, comply with legal obligations, and improve the Website and our published legal resources.
We process information where you have given consent, where it is necessary to take steps at your request before entering an engagement or to perform an agreement with you, where required by law, or where necessary for our legitimate interests in operating, securing and improving the Website.
Sharing information
We may share personal information with carefully selected service providers that help us operate the Website and provide requested services. These include website hosting and infrastructure providers, email delivery and contact-form providers, our newsletter provider, Cloudinary for media management, Google reCAPTCHA for protection against automated abuse, and Microsoft Clarity when you have consented to analytics cookies.
We may disclose information where required or permitted by law, to protect the rights, safety or property of Gakahu & Rosana Advocates or others, to investigate fraud or security incidents, or in connection with a lawful request from a regulator, court or other authority. We do not sell personal information.
Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to respond to an enquiry, provide requested communications, comply with legal, regulatory or professional obligations, resolve disputes and enforce our agreements.
Analytics and cookies
With your consent, we use Microsoft Clarity to understand general visitor interactions, including page engagement, scroll depth, heatmaps and session insights. We use this information to improve the Website and our legal resources, not for advertising. Google Analytics is not currently enabled on the Website; if that changes, it will be consent-gated and this Policy and our Cookie Policy will be updated.
Your rights and choices
Subject to applicable law, including the Kenya Data Protection Act, 2019, you may have the right to request access to personal information we hold about you, correction of inaccurate information, deletion of information in certain circumstances, restriction of or objection to certain processing, withdrawal of consent, and data portability where applicable. You may also have the right to lodge a complaint with the Office of the Data Protection Commissioner.
To exercise a right or ask a question about our processing of your personal information, please contact us. We may need to verify your identity before acting on a request.
Security and data breaches
We use reasonable administrative, technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure. If we become aware of a personal-data breach, we will investigate it and take steps required by applicable law, including notifying affected individuals or authorities where required.
Changes to this Policy
We may update this Policy from time to time to reflect changes to our practices, Services or legal obligations. When we do, we will update the date below. The revised Policy will take effect when it is published on the Website unless stated otherwise.
Contact us
If you have questions, concerns or complaints about this Policy, the information we hold about you, or your privacy rights, please contact Gakahu & Rosana Advocates.
This document was last updated on 9 November 2026.