Gichuri & Partners is committed to protecting your data privacy. In this privacy policy, we explain the personal data we collect, how we use it, with whom we share it, and how we safeguard it against unauthorized access. The policy applies to all individuals who interact with our services and websites, including clients, potential clients, and website visitors.
Who We Are
Gichuri & Partners is a tax consultancy and advisory firm based in Nairobi, Kenya. We are a registered tax agent offering tax and related services. These include tax compliance support, tax planning, tax advisory, bookkeeping and accounting, business registration, and payroll services. If you have any questions about this policy or your personal data, contact us at:
Gichuri & Partners
College House
University Way,
Nairobi Kenya.
info@gichuripartners.com or help@gichuripartners.com
+254 711 82 71 49
Data/Information We Collect
We collect certain information to help us deliver top-notch services to all our clients and website visitors. This data includes:
- Contact and personal identification data, including your full name, email address, phone number, national ID or passport number, and KRA PIN.
- Tax and financial information, including returns and filings, income, bank payments, business details, and financial statements.
- Communication details, including emails, messages, calls, and notes.
- Website data, including your IP address, cookies, and pages visited on our website.
We collect this data when you interact with us via our Contact Us page, visit our website, or respond to our communication.
How We Use Your Data
We may use your data for the following purposes:
- Preparing and providing tax services like filing returns, tax advisory, and planning, generating invoices, and processing payments.
- Fulfilling legal and regulatory requirements like responding to KRA requests, conducting due diligence, KYC checks, and record keeping per tax regulations.
- Responding to your questions and providing tax and business advisory services.
- Improving our services through web analytics, user behavior, client feedback, and reviews.
- Marketing (optional) through emails, newsletters, etc.
How We Process Your Data (Legal Grounds)
We process your data on legal grounds. These include:
- Your agreements with us to deliver tax and related services to you.
- Regulatory and legal obligations by relevant government bodies like KRA.
- Your consent (for marketing).
- Legal business interests to help us serve you better and maintain security.
Data Disclosure
We do not share or sell your data to unauthorized third parties. However, we may share your information with:
- Regulatory bodies like the Kenya Revenue Authority (KRA).
- Government and law enforcement bodies as allowed by Kenyan laws.
- Service providers like IT support and cloud storage services.
- Collaborators/ professional advisers like lawyers, auditors, and accountants.
All third parties handling this data follow strict confidentiality and security standards.
Data Security
At Gichuri & Partners, we use a combination of technical and organizational measures to secure your data. This is how we protect your information:
- We use secure cloud storage.
- Our systems are end-to-end encrypted to prevent data leaks to third parties.
- We execute regular backups and security checks.
- Our staff sign strict confidentiality agreements.
- We provide regular staff training on data protection.
Data Retention
We retain your data for as long as it’s necessary, after which we securely delete it. Here’s the typical data retention period for various data types:
- Client tax records and engagement: 7 years after the end of the engagement.
- Financial and payment records: For as long as the law allows.
- Website data: Between 1 day and 14 months, depending on the data. For instance, we retain server logs for 90 days max while retaining analytics and cookies for up to 14 months.
Our data retention fully complies with Kenya’s Data Protection Act, which allows companies to retain data proportionally and for no longer than necessary.
Client Data Protection Rights
Kenya’s Data Protection Act provides the following client data protection rights:
- Access: You can request a copy of the data we hold about you.
- Modification: You have a right to update or change the data we hold about you.
- Erasure (limited): Under particular circumstances, you can request that we delete your data where applicable.
- Objection/Restriction: Where applicable, you can object to certain data processing activities or limit your data usage.
- Consent withdrawal: You can withdraw consent for marketing, such as unsubscribing from a newsletter or email list.
- Data transfer: You can request a copy of your data to be transferred to another organization or to you in a portable format.
To exercise any of the above rights, contact Gichuri & Partners at info@gichuripartners.com.
Cookie Policy and Web Tracking
Our website uses cookies. These cookies are necessary for:
- Improving functionality.
- Analyzing web traffic.
- Enhancing the user experience.
However, you are allowed to decline non-essential cookies. To choose your cookie preferences, go to your browser settings.
Data Breaches Measures
Despite implementing robust security measures like passwords and encryption, data breaches sometimes happen. This is what we do when a data breach that affects your information occurs:
- We take immediate steps to contain the situation and fix the issue.
- We will let you know of this breach immediately and explain where it poses a real risk.
- We will report the incident to the Office of the Data Protection Commissioner (ODPC) when necessary.
Children’s Privacy
Our services are directed to users above 18 years. We do not knowingly collect any data from children or anyone below 18 years, unless it’s legally necessary, e.g., family business tax filing.
Third Party Links
Our website may contain links to third-party pages and websites. These third parties have their own privacy policies, data protection procedures and measures, and security standards. We don’t monitor, control, or manage how these third-party sites collect and handle user data. When you visit these sites, the information you provide will be managed through those sites’ privacy policy. Kindly review their privacy policies when visiting these sites.
Changes to This Privacy Policy
We may update this privacy policy occasionally. When we do, the changes will be posted on this page. We may also notify you of these changes via email. Keep checking this page to stay informed of any changes to this policy.
Contact Information
For questions, concerns, or complaints about this privacy policy, contact us at:
Gichuri & Partners,
College House
University Way,
Nairobi Kenya.
info@gichuripartners.com or help@gichuripartners.com
+254 711 82 71 49
