Privacy Policy

Last updated: June 2026  |  Effective date: June 2026

KB & Associates ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or contact us. Please read this policy carefully.

1. Information We Collect

Information you provide directly

• Contact form submissions: Name, business email address, organisation name, and your message.
• Newsletter subscriptions: Your email address.

Information collected automatically

• Browser type and version
• Pages visited and time spent on each page
• Referring website
• IP address (anonymised where possible)
• Cookie data (see Section 5 below)

2. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and service requests
• Send newsletters and updates you have opted into
• Improve the functionality and content of our website
• Comply with legal obligations
• Protect against fraudulent or abusive activity

We do not sell, rent, or trade your personal information to third parties.

3. Legal Basis for Processing (GDPR)

Where applicable, we process personal data on the following legal bases:

• Consent – for newsletter subscriptions and cookies
• Legitimate interests – for responding to contact form enquiries
• Legal obligation – where required by applicable law

4. Data Retention

We retain contact form submissions for up to 24 months unless you request deletion earlier. Newsletter subscription data is retained until you unsubscribe. You may request deletion at any time by contacting us.

5. Cookies

We use cookies to improve your browsing experience. Cookies we use include:

• Essential cookies: Required for the website to function (e.g., session management). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our site. Only set if you accept cookies.

You can manage your cookie preferences using the banner shown on your first visit, or by clearing your browser cookies at any time. Choosing "Reject" means only essential cookies will be used.

6. Third-Party Services

Our website uses the following third-party services which may collect data:

• Google Fonts – for typography (Google Privacy Policy applies)
• PostgreSQL Database – for secure contact form submission storage
• Font Awesome – for iconography via CDN

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at info@kbassociates.africa.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include HTTPS encryption, input validation, rate limiting, and access controls.

9. International Transfers

Our website is operated from Kenya and serves a global audience. If you are accessing this site from the European Economic Area (EEA) or other regions with data protection laws, please be aware your data may be transferred to and processed in countries with different standards. We take steps to ensure appropriate safeguards are in place.

10. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy regularly.

12. Contact Us

For any privacy-related questions or requests:

• Email: info@kbassociates.africa
• Address: Nairobi, Kenya