Privacy Policy
How we handle enquiries, bookings, order details, payment references and your personal information.
Njau & Associates Advocates is responsible for the personal information it collects through this website. Contact info@njauadvocates.com, +254 710 914 579, or Cedar Courts, Muthaiga North Road, Garden Estate Area, Nairobi; P.O. Box 29202-00100, with privacy questions. Last updated: 21 October 2026.
Information we collect
Enquiries collect your name, email, optional organisation, phone, selected service and message. Orders and bookings collect your name, email, phone, selected product or service, amount expected, submitted M-Pesa reference, order reference, preferred appointment date, time window and meeting format, optional notes or tool results, source page and acceptance of the purchase terms. Security records may include your IP address, timestamps, session identifiers and order recovery identifiers. We do not ask for your M-Pesa PIN, banking password or card credentials.
Why we use it
We use the information to respond to requests, check conflicts, arrange appointments, supply resources, record and reconcile payment references, issue applicable accounting documents, recover orders and handle support, cancellation or refund requests. We also use limited technical information to prevent abuse and protect records. Depending on the purpose, our lawful basis is taking steps at your request before a contract or performing a contract, complying with legal or professional obligations, or our legitimate interests in security and administration. Where consent is needed, we seek it separately. Accepting purchase terms is not consent to unrelated marketing.
Tool results and confidential information
Tools calculate results in your browser. A tool result is included in a booking only when you choose the review link and submit the form; you can inspect and edit the notes first. WhatsApp links prepare a message that you choose whether to send. Do not send confidential documents, passwords, private keys, sensitive case details or another person's personal data before the firm confirms it can act and agrees an appropriate sharing method.
Temporary browser storage
The checkout uses session cookies for security and browser-tab storage to preserve an incomplete order, its recovery key and the last order response. This helps you retry without buying twice. Tool-review notes may also be kept temporarily in the tab until submission. Clear the tab's stored data or close it on a shared device. These features are for orders and security, not advertising tracking.
Cookie choices
We currently use necessary security sessions, temporary order storage and a local record of your cookie choice. No analytics or advertising cookies are installed. Your choice is remembered for 180 days and can be reviewed through Cookie settings in every footer. Accepting cookies does not subscribe you to marketing or authorise future trackers. See our Cookie Policy for the storage inventory, providers, duration and controls.
Access and sharing
Authorised firm personnel use order records for the purposes above. Website hosting and email providers process relevant information on the firm's behalf. A payment provider or bank processes payment information under its own applicable terms; our current manual M-Pesa reference form does not automatically verify payment. We may disclose information when required by law or necessary for an authorised professional service. We do not sell personal information or add purchasers to unrelated marketing lists automatically.
WhatsApp is an external service with its own terms and privacy practices. Where any service provider processes information outside Kenya, applicable transfer safeguards are required. Contact the firm for information about the providers and safeguards relevant to your request.
Retention and security
We keep enquiries, order and accounting records only for the period needed for the stated purpose and applicable legal, tax and professional obligations, including any dispute or legal hold. The firm reviews retained records and deletes or anonymises information when it is no longer required. Download links expire after seven days; expiry of a link does not automatically erase the associated order record. Recovery and security identifiers are access-restricted. No website or ordinary email can guarantee absolute security.
Your choices and rights
You can ask to access or correct your information, request deletion or restriction where applicable, object to processing, withdraw consent where processing depends on consent, or request portability where the law provides it. Some records must be retained for legal or professional reasons. Contact info@njauadvocates.com; we may need proportionate identity checks before disclosing or changing order information. Recovery emails are sent only to the address recorded for the matching order.
You may also lodge a complaint with Kenya's Office of the Data Protection Commissioner. We explain material changes to this notice on this page. The purchase terms separately explain order scope, recovery, cancellation and refunds.