Effective date: [01/01/2026] Last updated: [10/]
1. Introduction
Nembo Consult ("Nembo Consult," "we," "us," or "our") provides communications, behaviour change, and development consultancy services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nemboconsult.co.ke (the "Site"), or otherwise engage with us — for example, by contacting us about our services, subscribing to updates, or working with us as a client or partner.
This policy is written to align with the Kenya Data Protection Act, 2019, and the Data Protection (General) Regulations, 2021. If you are located outside Kenya, additional rights may apply to you under the laws of your jurisdiction, and we will honour those where applicable.
By using the Site, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Site.
2. Information We Collect
We collect information in the following ways:
2.1 Information you provide directly
- Contact details submitted through contact or inquiry forms (e.g., name, email address, phone number, organisation, message content)
- Information shared when you email us directly or communicate with us via phone, WhatsApp, or social media
- Information provided when subscribing to a newsletter or mailing list, where applicable
- Information shared in the course of a consultancy engagement, proposal development, or contractual relationship (e.g., organisational details, project documentation)
2.2 Information collected automatically
- Standard technical data collected when you visit the Site, such as IP address, browser type, device type, pages visited, referring URLs, and time/date of visit
- Cookies and similar tracking technologies (see Section 6 below)
2.3 Information from third parties
- We may receive information about you from partners, clients, or referees in the context of a professional engagement (e.g., references provided during proposal or project work)
We do not knowingly collect sensitive personal data (such as health, financial, or biometric information) through the Site unless voluntarily provided by you in the course of an engagement, and only where necessary and lawful to do so.
3. How We Use Your Information
We use the information we collect to:
- Respond to inquiries and communicate with you about our services
- Develop, deliver, and manage consultancy engagements, proposals, and projects
- Send updates, newsletters, or information you have requested (you may opt out at any time)
- Improve and maintain the functionality and security of the Site
- Comply with legal, regulatory, or contractual obligations
- Protect the rights, property, or safety of Nembo Consult, our clients, or others
We do not sell, rent, or trade your personal information to third parties.
4. Legal Basis for Processing
Where required under the Data Protection Act, 2019, we process your personal data on one or more of the following bases:
- Consent — where you have given clear permission (e.g., subscribing to a newsletter)
- Contract — where processing is necessary to perform a service you have requested or to fulfil a contractual engagement
- Legitimate interest — where processing helps us run and improve our business, provided this does not override your rights and freedoms
- Legal obligation — where we are required to process data to comply with the law
5. How We Share Your Information
We may share information with:
- Service providers who support our operations (e.g., website hosting, email services), under obligations to protect your data
- Consortium or project partners, where you have engaged with us in the context of a specific project or proposal requiring such collaboration
- Regulatory or government authorities, where required by law
- Successors, in the event of a merger, acquisition, or restructuring of Nembo Consult
We do not share your information with third parties for their own independent marketing purposes without your consent.
6. Cookies and Tracking Technologies
The Site may use cookies and similar technologies to:
- Enable core site functionality
- Understand how visitors use the Site (analytics)
- Remember your preferences
You can control or disable cookies through your browser settings. Disabling cookies may affect some features of the Site.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including to meet legal, accounting, or reporting requirements. Contact form submissions and correspondence are generally retained for the duration of any resulting engagement plus a reasonable period afterward, unless you request earlier deletion.
8. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
9. Your Rights
Under the Data Protection Act, 2019, you have the right to:
- Be informed of how your data is used
- Access the personal data we hold about you
- Request correction of inaccurate or outdated data
- Request deletion of your data, subject to legal or contractual limitations
- Object to or restrict certain processing
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya
To exercise any of these rights, contact us using the details in Section 12.
10. International Data Transfers
If any personal data is transferred outside Kenya (for example, where a service provider is based abroad), we will ensure such transfers comply with the Data Protection Act, 2019, including confirming that adequate data protection safeguards are in place.
11. Children's Privacy
The Site is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:
Nembo Consult Website: nemboconsult.co.ke Email: info@nemboconsult.co.ke Phone: +254795 868373
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will indicate when changes were made. We encourage you to review this policy periodically.