Last Updated On: 04/11/2024
Effective Date: 04/11/2024
This Privacy Policy outlines the policies of Serian Consulting Limited (SCL) on the collection, use, and disclosure of personal information when you use our website (serianconsulting.com) and related services (the “Service”). By accessing or using the Service, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree, please do not access or use the Service.
We adhere to the data privacy principles as outlined by the Kenya Data Protection Act, 2019 and GDPR. These principles include lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
Note: We may update this Privacy Policy periodically and will post any revised version on the Service. The updated policy will become effective from the date it is posted. Continued use of the Service after that time will signify your acceptance of the changes. We encourage you to review this page periodically.
Information We Collect
We collect and process the following types of personal information:
- Contact Details: Name, email address, phone number.
- Professional Information: Job title, company name, and related business information.
- Feedback and Survey Responses: Information you provide through surveys, feedback forms, or consultations.
- Service Usage Data: Information related to how you interact with our website and services, including IP address and browser type.
In compliance with the Kenya Data Protection Act and GDPR, we ensure that data collection is lawful, transparent, and limited to what is necessary for the specified purposes.
How We Use Your Information
We use the personal information we collect for the following purposes:
- Consultation Services: To provide and enhance our consulting and human resources solutions.
- Client Engagement: For communicating with you regarding our services, updates, and industry insights.
- Marketing and Promotions: To share information about our services, workshops, and events that may be of interest to you.
- Feedback Collection: To gather customer feedback for improving our services.
- Compliance and Legal Obligations: To comply with legal requirements and enforce our policies.
- Analytics and Improvements: To better understand user behaviour and enhance the Service.
- Security Measures: To protect against potential security breaches and fraudulent activity.
Legal Basis for Processing (GDPR): We process your personal information based on one or more of the following grounds:
- Consent: When you have given clear consent for us to process your data.
- Contractual Necessity: When processing is necessary for a contract with you or to take steps before entering into a contract.
- Legitimate Interests: When processing is necessary for our legitimate interests, provided it does not override your rights.
- Legal Obligation: When processing is necessary to comply with legal obligations.
Kenya Data Protection Compliance: We process your data in accordance with the data protection principles stated in the Kenya Data Protection Act, of 2019, ensuring fairness and transparency.
How We Share Your Information
We do not sell your personal information to third parties. However, we may share your information in the following circumstances:
- Service Providers: We may share your data with trusted service providers who assist in running our business, such as IT support and analytics services. They are obligated to use your data solely for the purpose for which it was shared and must comply with data protection laws.
- Legal Compliance: We may disclose information to comply with applicable laws, regulations, court orders, or other legal processes.
- Business Transfers: In the event of a merger, acquisition, or sale, your information may be transferred as part of the business assets.
We ensure all third-party processors adhere to data protection obligations under the Kenya Data Protection Act and GDPR.
Retention of Your Information
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, up to 2 years from your last interaction or for the period required by law. Certain information may be kept longer for compliance, record-keeping, or other legitimate purposes.
Your Rights
GDPR Rights: Under the GDPR, you have rights to:
- Access, rectify, or erase your personal data.
- Restrict or object to processing.
- Withdraw consent at any time.
- Data portability: Request your data in a structured, commonly used format.
- Complain with a supervisory authority.
Kenya Data Protection Act Rights: You have the right to:
- Be informed about data processing.
- Access and rectify your personal data.
- Withdraw consent.
- Object to processing.
- Write complaints with the Office of the Data Protection Commissioner in Kenya.
To exercise these rights, contact us at privacy@serianconsulting.com. We will respond as required under applicable laws.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect data about your interaction with our Service. To learn more about how we use cookies and manage your preferences, please refer to our Cookie Policy.
Security
We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, given the inherent nature of the internet, we cannot guarantee absolute security. We follow industry-standard security practices in accordance with GDPR and Kenya’s Data Protection Act.
Contact Us
If you have questions or concerns regarding this Privacy Policy or the handling of your information, please contact us at privacy@serianconsulting.com. We are committed to addressing your inquiries in compliance with Kenya’s Data Protection Act, 2019, and GDPR.