Privacy Policy
Last updated: 1 September 2026
Martha Mbugua Law Office respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website or contact us through our online enquiry form.
For purposes of this Privacy Policy, “Martha Mbugua Law Office,” “we,” “us,” and “our” refer to Martha Mbugua & Associates, operating under the brand name Martha Mbugua Law Office.
1. Information we collect
We may collect personal data that you voluntarily provide when you use this website, complete a contact form, or communicate with us.
This may include:
your name;
your email address;
your telephone number, where provided;
your company or organisation, where provided;
the nature of your enquiry;
any information included in your message; and
technical information such as your IP address, browser type, device information, pages visited, and website usage data.
Please do not submit confidential, privileged, or sensitive information through the website contact form. Contacting us through this website does not create a lawyer-client relationship unless and until we have formally agreed to act for you.
2. How we use your information
We may use your personal data to:
respond to your enquiry;
assess whether we are able to assist you;
communicate with you about our services;
manage potential or existing client relationships;
conduct conflict checks, where necessary;
maintain website security and performance;
improve the content and functionality of our website; and
comply with legal, regulatory, professional, or administrative obligations.
We will only use your personal data for lawful, specific, and legitimate purposes.
3. Legal basis for processing
We may process your personal data where:
you have given consent;
processing is necessary to respond to your enquiry or take steps before entering into a client engagement;
processing is necessary for the performance of a contract or legal services engagement;
processing is necessary to comply with a legal or regulatory obligation; or
processing is necessary for our legitimate interests, including managing our practice, protecting our systems, and responding to prospective client enquiries.
4. Sharing of personal data
We do not sell your personal data.
We may share your personal data with:
professional advisers, consultants, or service providers who support our operations;
IT, hosting, website, analytics, email, or cloud service providers;
regulators, courts, public authorities, or law enforcement agencies where required by law; and
third parties where disclosure is necessary in connection with legal services, subject to applicable professional obligations.
Where we use third-party service providers, we take reasonable steps to ensure they handle personal data securely and only for authorised purposes.
5. International transfers
Some of our service providers may process or store personal data outside Kenya. Where personal data is transferred outside Kenya, we will take reasonable steps to ensure that appropriate safeguards are in place, or that the transfer is otherwise permitted under applicable data protection laws.
6. Data security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
However, no method of transmission over the internet or electronic storage is completely secure. You should avoid submitting confidential, privileged, or highly sensitive information through the website form.
7. Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to respond to enquiries, manage professional obligations, comply with legal requirements, resolve disputes, and maintain appropriate business records.
Where your enquiry does not result in an engagement, we may retain limited information for a reasonable period for administrative, conflict-checking, legal, or professional reasons.
8. Your rights
Subject to applicable law, you may have the right to:
be informed about how your personal data is used;
access the personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data, where applicable;
object to or restrict certain processing activities;
withdraw consent where processing is based on consent;
request information about safeguards used where personal data is transferred outside Kenya; and
lodge a complaint with the Office of the Data Protection Commissioner.
To exercise your rights, please contact us using the details below.
9. Cookies and website analytics
Our website may use cookies or similar technologies to improve functionality, understand website usage, and enhance user experience.
Cookies are small files placed on your device when you visit a website. You may disable cookies through your browser settings, although some parts of the website may not function properly.
Where required, we will request your consent before using non-essential cookies.
10. Third-party links
This website may contain links to third-party websites, including LinkedIn and other external platforms. We are not responsible for the privacy practices, content, or security of third-party websites. You should review their privacy policies before providing any personal data.
11. Children’s privacy
Our website is not directed at children. We do not knowingly collect personal data from children through this website. If you believe a child has provided personal data to us, please contact us so that we can take appropriate steps.
12. Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or website functionality. The updated version will be posted on this page with a revised “Last updated” date.
13. Contact us
For questions about this Privacy Policy or how we handle personal data, please contact:
Martha Mbugua Law Office
Eldama Park,
Mara 1 Block, 1st Floor
admin@marthambugua.law
www.marthambugua.law