Privacy Policy

Last updated: 8 July 2026

OLM Law Advocates LLP ("we", "us", or "our") is committed to protecting your personal data in accordance with the Data Protection Act, 2019 (No. 24 of 2019) and the regulations issued by the Office of the Data Protection Commissioner (ODPC). This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or engage our services.

1. Data Controller

The data controller for your personal data is OLM Law Advocates LLP, a limited liability partnership registered in Kenya and regulated by the Law Society of Kenya.

Address: Mwalimu Towers, 1st Floor, Off Mara Road, Upperhill, Nairobi, Kenya
Email: [email protected]
Telephone: +254 112 753 955

2. Information We Collect

We may collect and process the following categories of personal data:

• Contact information: Name, email address, telephone number, and postal address.
• Professional information: Job title, organisation name, and professional qualifications.
• Communication data: Records of correspondence with us, including enquiries submitted through our website.
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage data: Information about how you use our website and services.

3. Legal Basis for Processing

Under the Data Protection Act, 2019, we process your personal data on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to newsletters).
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal obligation: Where processing is necessary for compliance with a legal obligation to which we are subject (e.g., Law Society of Kenya regulations, anti-money laundering requirements).
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.

4. How We Use Your Information

We use your personal data for the following purposes:

• To provide legal services and respond to your enquiries.
• To communicate with you about matters you have instructed us on.
• To send legal updates and newsletters where you have consented.
• To comply with legal and regulatory obligations, including conflict checking and anti-money laundering verification.
• To improve our website and services.
• To protect our legal rights and comply with court orders.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. For clients, this typically means retaining files for at least seven (7) years after the conclusion of a matter, in accordance with Law Society of Kenya guidelines.

6. Your Rights Under the Data Protection Act, 2019

As a data subject, you have the following rights:

• Right of access: To request a copy of the personal data we hold about you.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure: To request deletion of your personal data in certain circumstances.
• Right to restriction: To request restriction of processing in certain circumstances.
• Right to object: To object to processing based on legitimate interests or for direct marketing.
• Right to data portability: To receive your personal data in a structured, commonly used format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
• Right to lodge a complaint: You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

7. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure servers, and regular security assessments.

8. Third-Party Disclosures

We do not sell, trade, or otherwise transfer your personal data to third parties without your consent, except where necessary to provide legal services (e.g., instructing foreign counsel, expert witnesses, or barristers), to comply with legal obligations, or to protect our rights.

9. International Transfers

Where we transfer your personal data outside Kenya, we ensure appropriate safeguards are in place in accordance with section 48 of the Data Protection Act, 2019 and any applicable adequacy decisions by the ODPC.

10. Cookies

Our website uses cookies to enhance your browsing experience. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date.