Last Updated: 26th May,2025.
1. Introduction
This Privacy Policy governs how LER Consult Limited collects, uses, maintains, and discloses information collected from users of our services. As a multidisciplinary consultancy firm specializing in urban planning, environmental management, and geospatial services, we handle sensitive client and project data with the utmost confidentiality. This document outlines our commitment to protecting your personal information in compliance with Kenya’s Data Protection Act and international data privacy standards. By engaging with our services, you acknowledge and consent to the practices described herein.
2. Information We Collect
We gather various types of information necessary for delivering our professional services effectively. Personal data may include contact details, professional affiliations, and identification documents required for regulatory compliance. Non-personal data encompasses technical information like IP addresses and website analytics. For specialized services like Resettlement Action Plans (RAP) and Environmental Impact Assessments, we may collect sensitive data about land use, livelihoods, and community demographics. All data collection follows the principle of minimal necessity and is obtained through lawful means.
a. Personal Information
We collect identifiable information such as names, email addresses, phone numbers, and professional details to establish contractual relationships and communicate effectively. This includes official documentation for regulatory submissions to bodies like NEMA and county governments. Financial information is processed securely for billing purposes only, with strict access controls in place.
b. Non-Personal Information
Technical data including device information, browsing patterns, and cookie analytics help us optimize our digital platforms. This anonymized information improves user experience and service delivery without identifying individuals personally. Survey responses and feedback are aggregated to enhance our service quality.
c. Special Categories of Data
For projects involving land surveys, environmental assessments, or community resettlement, we process sensitive geospatial data, livelihood information, and demographic details. This data is handled under strict confidentiality agreements and only used for the specified project purposes in compliance with professional ethics and legal requirements.
3. How We Use Your Information
Collected data serves multiple legitimate business purposes aligned with our service offerings. Personal information facilitates client communication, service delivery, and contractual obligations. Technical data helps maintain and improve our digital infrastructure. Sensitive project data is processed exclusively for the commissioned work, such as developing urban plans or conducting environmental audits. We never use information beyond the original collection purpose without obtaining additional consent.
4. Legal Basis for Processing
Data processing activities are grounded in legal compliance, contractual necessity, and legitimate business interests. Regulatory requirements under Kenyan laws like EMCA and county statutes often mandate specific data collection. Client data is processed to fulfill service agreements, while non-essential uses like marketing require explicit opt-in consent. We maintain records of all processing activities to demonstrate compliance with data protection principles.
5. Data Sharing and Disclosure
Information is shared selectively with authorized entities only when essential. Government agencies receive data for permitting and compliance purposes under statutory obligations. Trusted third-party consultants and technology providers may access data under strict confidentiality agreements for specialized project components. In legal scenarios, we disclose information only when required by court orders or regulatory investigations.
6. Data Security
We employ robust technical and organizational measures to safeguard data against unauthorized access or breaches. Encryption protocols protect digital files, while physical records are stored in secure facilities with access restrictions. Regular security audits and staff training ensure ongoing protection of sensitive information across all service divisions. Incident response plans are in place to address any potential data breaches promptly.
7. Data Retention
Retention periods correspond to legal, contractual, and operational requirements. Active project data is maintained throughout the engagement and for a statutory period thereafter. Client records are archived for reference and potential dispute resolution, then securely destroyed when no longer needed. Specific retention schedules apply to different data categories based on their sensitivity and purpose.
8. Your Rights
Data subjects enjoy rights under Kenya’s Data Protection Act 2019, including access, rectification, and erasure of personal data. Requests must be submitted in writing to our Data Protection Officer for verification. We respond within statutory timelines, though certain legal or contractual obligations may limit full compliance in some cases. Complaints may be escalated to Kenya’s Office of the Data Protection Commissioner.
9. Cookies and Tracking Technologies
Our website uses essential and analytical cookies to optimize functionality and user experience. Essential cookies enable core features like secure logins, while analytical cookies help us understand visitor behavior through anonymized metrics. Users can manage preferences via browser settings, though disabling cookies may impair certain website functionalities.
10. Third-Party Links
External links provided for reference are beyond our control. We advise reviewing the privacy policies of any third-party sites before sharing personal information. LER Consult Limited bears no responsibility for the content or data practices of external platforms, including government portals or partner organizations.
11. Changes to This Policy
Policy updates reflect evolving legal requirements and service enhancements. Revised versions will be posted on our website with clear effective dates. Material changes affecting data processing will be communicated directly to affected parties where feasible. Continued use of services after updates constitutes acceptance of the modified terms.