Bonyo LawTech Attorneys

Legal

Privacy Policy

Last updated: February 2026

1. Introduction

Bonyo Law (Bonyo Mwongela & Company Advocates) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Kenya Data Protection Act 2019 and other applicable data protection laws.

By accessing our website or engaging our services, you consent to the practices described in this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

Bonyo Law (Bonyo Mwongela & Company Advocates)

3. Information We Collect

3.1 Information You Provide

  • Name and contact details (email address, phone number)
  • Company or organization information
  • Information provided during consultations or enquiries
  • Communication preferences

3.2 Automatically Collected Information

  • IP address and browser type
  • Device information
  • Pages visited and time spent on our website
  • Referring website addresses
  • Cookies and similar tracking technologies

4. How We Use Your Information

We process your personal data for the following purposes:

  • Providing legal services and responding to enquiries
  • Communicating with you about your matter or our services
  • Complying with legal and regulatory obligations
  • Improving our website and services
  • Sending marketing communications (with your consent)
  • Protecting our legal rights and preventing fraud

5. Legal Basis for Processing

We process your personal data based on:

  • Performance of a contract: When processing is necessary to provide legal services
  • Legal obligation: To comply with laws and regulations
  • Legitimate interests: To operate and improve our business
  • Consent: For marketing communications and non-essential cookies

6. Data Sharing and Disclosure

We may share your personal data with:

  • Professional advisors and experts working on your matter
  • Courts, tribunals, and regulatory authorities when required
  • Service providers who assist with our business operations
  • Third parties with your consent or as permitted by law

We do not sell your personal data to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typically, client files are retained for at least 7 years after the conclusion of a matter.

9. Your Rights Under Kenya's Data Protection Act 2019

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data (right to be forgotten)
  • Object to processing of your data
  • Request restriction of processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Office of the Data Protection Commissioner

10. Cookies

Our website uses cookies to enhance your browsing experience. For more information about the cookies we use, please see our cookie notice when you first visit our website.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: consult@bonyolaw.com
Address: Nairobi, Kenya

This Privacy Policy is compliant with the Kenya Data Protection Act 2019. For more information about data protection compliance services, please visit our practice area page.