Execulex Training & Consultancy Limited respects your privacy and is committed to protecting personal data we handle in the course of our work. This policy explains what we collect, why, how we use it, and the rights you hold under the Data Protection Act, 2019 of Kenya and equivalent regulations applicable to international clients.
Who we are
Execulex Training & Consultancy Limited is a private company registered in Kenya. For the purposes of data-protection law, Execulex is the data controller in respect of personal data we collect through this website and through professional engagements.
Our contact details are set out at the end of this policy.
The personal data we collect
We collect only the personal data we need to do our work and to communicate with prospective and current clients. The main categories are:
- Contact information you provide when you complete our website enquiry form, write to us by email, or connect with us professionally - including name, role, organisation, and email address.
- Engagement information shared in the course of an advisory or training relationship, which may include confidential commercial, operational, and personnel-related information necessary to deliver the engagement.
- Technical information automatically collected when you visit this website - including IP address, browser type, and pages visited, used in aggregated form for site analytics.
- Newsletter subscriber data - email address and any preferences you provide - if you choose to subscribe to our writing.
How we use personal data
We use personal data for the following purposes:
- To respond to enquiries and to determine whether an engagement is a fit.
- To deliver advisory, training, and consulting services to clients under contract.
- To send insights and updates to subscribers who have opted in, with an unsubscribe link in every message.
- To maintain the integrity, security, and performance of this website.
- To comply with our legal, regulatory, and professional obligations.
The legal basis we rely on
Depending on the activity, we process personal data on one or more of the following legal bases: your consent (for example, when you subscribe to insights), the necessity of performing a contract with you or your organisation, our legitimate interest in operating and improving the practice, and our legal obligations.
How we share personal data
We do not sell personal data. We share it only in the following circumstances: with trusted service providers who help us operate the practice (for example, email and hosting providers) under strict confidentiality and data-protection obligations; with your organisation in the ordinary course of a professional engagement; with regulators, courts, or professional bodies where we are legally required to do so; and with a successor entity in the event of any future restructuring.
How long we keep personal data
We retain personal data only for as long as we need it for the purpose for which it was collected, or for as long as we are required to retain it by law or professional rule. Engagement records are typically retained for seven years from the close of the engagement. Newsletter subscriber data is retained until you unsubscribe.
How we protect personal data
We apply administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include access controls, encrypted storage where appropriate, and confidentiality undertakings from anyone with access to client information.
Your rights
You have the right to access your personal data, to correct it if inaccurate, to request its deletion in specified circumstances, to object to or restrict certain processing, to data portability, and to withdraw any consent you have given. To exercise any of these rights, write to us at the address below. We will respond within the time period required by applicable law.
If you are not satisfied with how we handle your request, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya or the equivalent authority in your jurisdiction.
International transfers
Some of the service providers we use may be located outside Kenya. When personal data is transferred internationally we take steps to ensure that the data continues to receive an appropriate level of protection in line with applicable law.
Cookies
This website uses a small number of cookies for site analytics. We do not use advertising cookies. You can disable cookies in your browser settings; doing so will not affect the core functionality of the site.
Changes to this policy
We may update this policy from time to time to reflect changes in our practice, our service providers, or the legal landscape. The "last updated" date at the top of the policy will reflect the most recent change.
Contact
Questions, requests, or complaints relating to this policy can be sent to:
Execulex Training & Consultancy Limited
Email: info@execulex.com
Nairobi, Kenya