Who we are
Kfred & Associates is a firm of Certified Public Accountants based in Nairobi, Kenya. We decide how and why the personal data described here is used, which makes us the data controller under the Data Protection Act, 2019.
Contact for privacy questions: Add privacy contact email and postal address.
What we collect
We collect only what we need for the purposes below.
Details you send through our website, such as your name, organisation, email address, phone number and message.
Information you give us as a client, such as financial records, tax PINs, payroll data, and identity documents for company directors and shareholders.
CVs and cover letters sent to us for recruitment.
Technical data from your visit, such as your IP address and browser type, recorded by our website and hosting software.
Why we use it
We use personal data only where the law allows it:
To reply to an enquiry or prepare a quote, at your request.
To deliver the services in our engagement letter with you.
To meet our legal obligations, including tax law, the Companies Act and the anti-money laundering rules that apply to accountants.
To keep our website working and secure.
Who we share it with
We do not sell personal data. We share it only when we need to:
With the Kenya Revenue Authority, the Business Registration Service and other authorities, when we file on your behalf or the law requires it.
With service providers who host our website, email and software, under contracts that require them to protect it.
With our professional advisers, such as lawyers and insurers, where necessary.
Data stored outside Kenya
Some of our service providers may store data outside Kenya. Where they do, we take the steps the Data Protection Act requires to keep it protected. Add the providers and countries involved.
How long we keep it
We keep client records for at least five years, as Kenyan tax law requires, and longer where another law or an open matter needs it. Enquiries that do not lead to an engagement are deleted when we no longer need them. CVs are kept only while they are relevant to recruitment.
Your rights
Under the Data Protection Act, 2019, you have the right to:
Be told how your personal data is used.
Get a copy of the personal data we hold about you.
Object to the processing of all or part of it.
Have false or misleading data corrected.
Have false, misleading or unlawfully held data deleted.
Questions and complaints
To use any of these rights, contact us using the details above. If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.
Cookies
Our website uses cookies it needs to work properly. If we add analytics or other optional cookies, we will ask for your consent first and update this policy.
Security
We protect personal data with access controls, secure storage and confidentiality obligations on everyone who works on client files.
Changes to this policy
We will update this page when our practices change. Last updated: Add date of publication.