Privacy Policy

Effective Date: 1st October 2026

Sterling Law is committed to protecting the privacy and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website, communicate with us, or use our legal services.

We handle personal data in accordance with applicable laws and regulations, including the Data Protection Act, 2019 of Kenya and applicable regulations and guidance issued by the Office of the Data Protection Commissioner (ODPC).

1. Who We Are

Sterling Law is a law firm based in Nairobi, Kenya.

Website: https://sterlinglaw.co.ke/
Telephone: +254 748 161 820
Email: info@sterlinglaw.co.ke
Address:
The Oval, 2nd Floor,
Jalaram Road,
off Ringroad Parklands Road,
P.O. Box 20158-00200,
Nairobi, Kenya.

Business Hours: Monday – Friday, 8:00 AM – 5:00 PM

For purposes of this Privacy Policy, Sterling Law may act as a data controller in relation to personal information collected through our website and in connection with our interactions with clients, prospective clients, professional contacts, and other individuals.

2. Personal Information We Collect

Depending on how you interact with us, we may collect and process information including:

Full name and contact details;
Email address and telephone number;
Company or organisation details;
Information provided through contact and enquiry forms;
Details relating to your legal enquiry or prospective matter;
Information provided during consultations or correspondence;
Documents and other information voluntarily provided to us in connection with a legal matter;
Website usage and technical information, including IP address, browser type, device information, and pages visited;
Information collected through cookies and similar technologies.

Where you provide information relating to another individual, you should ensure that you are authorised to provide that information and that the individual is appropriately informed where required by law.

3. How We Collect Personal Information

We may collect personal information:

Directly from you when you contact us;
When you submit a form through our website;
When you request a consultation or legal service;
Through email, telephone, or other correspondence;
When you provide information during the course of a legal engagement;
Automatically when you interact with our website through cookies, analytics, and similar technologies;
From publicly available or lawful third-party sources where appropriate.

4. How We Use Your Information

We may process personal information for purposes including:

Responding to enquiries and requests for information;
Arranging consultations and appointments;
Providing legal services and related professional support;
Communicating with clients and prospective clients;
Managing client relationships and legal matters;
Preparing and maintaining legal and administrative records;
Complying with legal, regulatory, professional, and ethical obligations;
Verifying information where necessary;
Protecting our rights, property, systems, and information;
Improving our website, services, and user experience;
Understanding website traffic and usage through analytics;
Sending relevant information or updates where permitted by law and, where required, with your consent.

We will only collect and process personal data for lawful, specific, and legitimate purposes and will seek to limit the information collected to what is necessary for those purposes. These principles are consistent with the requirements of Kenya’s data protection framework.

5. Legal Basis for Processing

Depending on the circumstances, we may process personal information where:

You have provided consent;
Processing is necessary to provide a service or take steps at your request before entering into an engagement;
Processing is necessary to comply with a legal or regulatory obligation;
Processing is necessary for the establishment, exercise, or defence of legal claims;
Processing is necessary for legitimate interests, provided those interests do not override your applicable rights and freedoms.

Where we rely on consent, you may withdraw your consent where permitted by law. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

6. Legal and Confidential Information

As a law firm, we may receive confidential and legally sensitive information from clients and prospective clients.

We take appropriate measures to protect such information and handle it in accordance with applicable legal, professional, and confidentiality obligations.

However, information submitted through a general website enquiry form should not be assumed to establish an advocate-client relationship. You should avoid submitting highly confidential or time-sensitive information through the website until an appropriate engagement has been confirmed.

7. Sharing and Disclosure of Personal Information

We do not sell or rent personal information.

We may disclose personal information where reasonably necessary to:

Provide legal and professional services;
Our authorised employees, advocates, consultants, or professional advisers;
Service providers who support our website, hosting, email, analytics, IT, or other business operations;
Government authorities, regulators, courts, or law enforcement agencies where required or permitted by law;
Professional advisers, experts, or other third parties where necessary for the conduct of a legal matter;
Protect our legal rights, clients, property, systems, or business operations.

Where third-party service providers process personal information on our behalf, we take reasonable steps to ensure that appropriate confidentiality and data protection safeguards are maintained.

8. International Transfers

Some service providers or technology platforms used in operating our website or business may process information outside Kenya.

Where personal information is transferred outside Kenya, we will take reasonable steps to ensure that the transfer and subsequent processing are carried out in accordance with applicable data protection requirements and appropriate safeguards.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve functionality, understand how visitors use the website, and improve our online services.

We may use analytics tools, including Google Analytics, to collect information about website traffic and visitor interactions. This information may include technical information such as device type, browser, approximate location, pages visited, and how visitors interact with the website.

Where required, we will obtain appropriate consent before placing or using non-essential cookies.

You can also manage or disable cookies through your browser settings. Disabling certain cookies may affect some website functionality.

10. Data Security

Sterling Law takes reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, destruction, or other unlawful processing.

These measures may include access controls, secure systems, appropriate authentication, confidentiality obligations, security monitoring, and other safeguards appropriate to the nature of the information being processed.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, comply with legal and professional obligations, resolve disputes, enforce agreements, and maintain appropriate business and legal records.

The specific retention period may vary depending on the nature of the information and the applicable legal, regulatory, or professional requirements.

Where personal information is no longer required and there is no lawful reason to retain it, we will take reasonable steps to delete, anonymise, or securely dispose of it.

12. Your Data Protection Rights

Subject to applicable law and any lawful limitations, you may have the right to:

Be informed about how your personal information is processed;
Request access to personal information we hold about you;
Request correction of inaccurate or incomplete information;
Request deletion or erasure of personal information in appropriate circumstances;
Object to certain processing of your personal information;
Request restriction of processing in appropriate circumstances;
Request portability of your personal information where applicable;
Withdraw consent where processing is based on consent.

These rights are recognised under Kenya’s data protection framework.

To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before processing your request.

13. Third-Party Websites

Our website may contain links to third-party websites or online services.

Sterling Law is not responsible for the privacy practices, content, security, or policies of third-party websites. We encourage you to review the privacy policies of those websites before providing personal information.

14. Children’s Privacy

Our website and legal services are not specifically directed at children. We do not knowingly collect personal information from children through the website without appropriate legal authority or consent.

If you believe that a child has provided personal information to us without appropriate consent or authority, please contact us so that we can take appropriate steps.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or data protection practices.

Any updated version will be published on this page with the revised effective date. We encourage visitors to review this Privacy Policy periodically.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your personal information is handled, please contact us:

Sterling Law
The Oval, 2nd Floor,
Jalaram Road,
off Ringroad Parklands Road,
P.O. Box 20158-00200,
Nairobi, Kenya.

Phone: +254 748 161 820
Email: info@sterlinglaw.co.ke
Website: https://sterlinglaw.co.ke/