Data and Privacy Policy

We are committed to protecting the confidentiality and security of your personal data. This Data and Privacy Policy outlines how we collect, use, store, and safeguard your data when you use our services or visit our website.

Types of Data Collected

• We collect both Specific Identifier Personal Information and Non- Specific Identifier Personal Information:
• Specific Identifier Personal Information: This includes your name, email address, phone number, and other information necessary to provide you with our legal services or respond to your inquiries.
• Non-Specific Identifier Personal Information: This includes technical data such as your IP address, browser type, operating system, and usage statistics, which help us improve our website and services.

Purpose of Data Collection

• We collect and process your data for the following purposes:
• Providing Services: To respond to inquiries, and maintain a relationship with you.
• Marketing Communications: To send updates, newsletters, and other promotional materials with your explicit consent.
• Website Functionality: To analyze website usage and improve user experience.
• Compliance: To comply with legal obligations, regulatory requirements, or contractual commitments.
  
  

Legal Basis

• We process your personal data based on one or more of the following legal grounds:
• We obtain your explicit consent to process your personal data for specific purposes (e.g., marketing communications).
• Contractual Necessity: We process your data to fulfill our contractual obligations (e.g., providing legal services).
• Legal Obligation: We may process your personal data to comply with legal or regulatory obligations.
• Legitimate Interests: We may process your data based on our legitimate interests, provided that such processing does not override your rights and freedoms.

Consent

• By using our website or submitting your personal data, you provide explicit consent for Ithera Africa to process your personal data for the purposes outlined in this policy. Nevertheless, for marketing communications, we will request explicit consent through an opt-in mechanism (e.g., checkbox). You can withdraw your consent at any time by clicking “unsubscribe” or contacting us directly.

Data Sharing

• We do not sell or rent your personal data to third parties. However, we may share your data with third-party service providers who assist us in delivering services (e.g., cloud storage, email marketing, or payment processors). These providers are required to protect your data and use it only for the purposes we specify in our agreements with them.
• In the event of a cross-boarder relationship (e.g., from the EU to Kenya), we have ensured that appropriate safeguards are in place, to protect your personal data in compliance with applicable laws and internationally recognized safeguards.
  

Data Security

• We are dedicated to safeguarding your personal data. We use industry-standard security measures, including encryption, firewalls, and access controls, to protect your information from unauthorized access, alteration, or loss. While we take all necessary steps to secure your data, it’s important to note that no method of online transmission or data storage is entirely risk-free. We remain committed to continuously improving our security practices to ensure your data is as protected as possible

Data Retention

• We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal obligations, resolving disputes, and enforcing agreements.
• When your data is no longer needed, we will securely dispose of it in accordance with applicable laws.
  

Your Rights

• You have the following rights regarding your personal data:
• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request the correction of inaccurate or incomplete data.
• Right to Deletion (Right to be Forgotten): You may request the deletion of your data under specific circumstances.
• Right to Restrict Processing: You may request that we restrict the processing of your data, subject to applicable laws.
• Right to Object: You may object to the processing of your personal data, especially when it is used for direct marketing purposes.
• To exercise any of these rights, please contact us at info@ithera.africa

Cookies and Tracking Technologies

• We use cookies to improve your experience on our website. Cookies are small text files stored on your device that allow us to track and improve your website usage.
  You can manage your cookie preferences through your browser settings, but please note that disabling cookies may affect certain features of our website.

Data Breach Notification

• In the event of a data breach, we will notify you without undue delay if your personal data is compromised, as required by applicable data protection laws. We will provide details of the breach, the steps we have taken to mitigate it, and any actions you can take to protect your data.
  Changes to the Data and Privacy Policy
  We may update this Data and Privacy Policy from time to time to reflect changes in law or business practices. Any changes will be posted on this page, and the new policy will take effect immediately upon posting.

Contact Us

• If you have any questions about this Data and Privacy Policy or wish to exercise your rights regarding your personal data, please contact immediately.