Privacy Policy

Makeni Mutua & Associates LLP ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services, in compliance with the Data Protection Act, 2019 of Kenya.

We may collect and process the following types of personal data:

• Identity Data: Names, usernames, or similar identifiers.
• Contact Data: Email addresses, telephone numbers, and physical addresses.
• Professional Data: Business details, KRA PINs, financial records, and employment information necessary for audit and tax services.
• Technical Data: IP addresses, browser type, and version (via cookies) to improve website functionality.

We process your personal data for the following lawful purposes:

• To provide professional services (Audit, Tax, Accounting, Advisory) as per our engagement contract.
• To comply with legal and regulatory obligations (e.g., filing tax returns with KRA, reporting to ICPAK).
• To communicate with you regarding updates, newsletters, or changes to our services.
• To improve our website and client service delivery.

We have implemented appropriate technical and organizational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know and are subject to a duty of confidentiality.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, financial records are retained for a minimum period of seven (7) years as required by Kenyan tax laws.

Under the Data Protection Act, 2019, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data where there is no good reason for us continuing to process it.
• Objection: Object to processing of your personal data for direct marketing purposes.