1. Introduction

Welcome to the website of Morara, Apiemi & Nyangito Advocates (the "Firm", "we", "us", "our"). We are committed to protecting your privacy and ensuring your rights when you visit our website or engage with our services. This document sets out our Privacy Policy (how we collect, use, disclose and protect information) and our Terms & Conditions (the rules governing your use of our website and services).

By accessing or using our website https://moraranyangitoadv.co.ke (the "Site"), you agree to these provisions. If you do not agree, please do not use the Site.

2. Applicable Laws & Legal Framework

We operate in Kenya and comply with the applicable legislation and regulations, including but not limited to:

• The Computer Misuse and Cybercrimes Act, 2018 (Cap. 79C) — which provides for offences relating to computer systems, cybercrime prevention, investigation and prosecution.
• The Data Protection Act, 2019 — which governs the processing of personal data in Kenya (obligation on data controllers/processors to protect personal data securely).
• Other supporting regulation — e.g., the Kenya Information & Communications (Consumer Protection) Regulations, 2019, and frameworks for cybersecurity and data safety.

We are committed to respecting user rights (privacy, access to information, data protection) and to safeguard our digital operations in accordance with these laws.

3. Information We Collect

3.1 Voluntary Information

When you contact us, complete a form, subscribe, or engage with our services, you may provide information such as:

• your name
• email address
• telephone number
• any message or content you choose to submit
• other identifiers or information you input.

3.2 Automatically Collected Information

When you visit the Site, we may automatically collect:

• your Internet Protocol (IP) address — to understand site traffic, detect fraud or abuse, enhance security, and for analytics/marketing purposes
• your browser type, device information, operating system
• pages you visited, referral source, time & date of visit, duration of session, click-through behaviour
• cookies and similar tracking technologies (please see our cookie section below).

3.3 Purpose of Collecting IP Addresses

We collect IP addresses and usage data so that we may:

• understand how visitors use our Site and interact with our services
• manage, maintain and secure the Site (for example, detecting malicious activity)
• undertake analytics and marketing efforts (for example, sending tailored communications or retargeting).

We handle such information responsibly and in compliance with data-protection laws.

4. How We Use Your Information

We use the data we collect for the following purposes:

• To respond to your enquiries, provide legal service information and build client relationships.
• To improve and customise our Site — e.g., understanding popular pages, usage patterns, improving content and navigation.
• To enhance security of our Site and prevent misuse (e.g., detecting unauthorized access, fraud attempts).
• For marketing and communication: We may use aggregated or anonymised data (including IP addresses) to run lawful marketing campaigns, improve our service offering, and refine our outreach.
• To comply with legal obligations, including those under cyber-crime and data protection law (for example, preserving data for investigations, responding to lawful requests).

5. Data Sharing & Disclosure

We will not sell or rent your personal information to third parties. We may disclose information to:

• trusted service providers who help us operate the Site (e.g., hosting, analytics, marketing platforms) and are bound to confidentiality and security obligations.
• law enforcement agencies or regulators when required to comply with legal processes or to protect rights, property or safety (including under the Computer Misuse and Cybercrimes Act).
• other entities if we believe disclosure is necessary for legal reasons, to enforce our Terms, or protect our rights or those of others.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to collect tracking data, manage visitor sessions, remember preferences, and improve our marketing and analytics. Most browsers allow you to disable cookies, but doing so may affect your experience of the Site.

7. Data Security & Retention

We implement appropriate technical and organisational measures to protect data from unauthorised access, loss, alteration or destruction. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to meet legal obligations. We regularly review our data retention practices and security controls.

8. Your Rights

You have the right to:

• request access to the personal data we hold about you.
• request correction or deletion of your personal data.
• object to or restrict processing of your personal data in certain circumstances.
• withdraw your consent to marketing communications at any time.
• lodge a complaint with the relevant data protection authority in Kenya.

To exercise these rights, please contact us at the details in Section 12 below.

9. Terms & Conditions of Use

9.1 Acceptance of Terms

By using the Site, you agree to abide by these Terms. If you do not accept these Terms, you should refrain from using the Site.

9.2 Nature of Information on the Site

The content provided on this Site is for general informational purposes only and does not constitute legal advice. No attorney-client relationship is formed by access to or use of the Site. For specific legal advice, you should contact us directly.

9.3 Intellectual Property Rights

All content on this Site (text, graphics, logos, images, software) is owned or licensed by the Firm. You may not reproduce, modify, distribute or republish any of it without our express written permission.

9.4 User Conduct

You agree not to:

• use the Site in any way that is unlawful, fraudulent or harmful.
• attempt to interfere with the Site's operation or security (unauthorised access, hacking, distributing malware) — such activity may constitute an offence under the Computer Misuse and Cybercrimes Act, 2018.
• post, transmit or distribute any material that is defamatory, obscene, or in violation of any person's rights.

We reserve the right to suspend or terminate access if we suspect misuse.

9.5 Limitation of Liability

To the maximum extent permitted by law, the Firm excludes all liability for any direct, indirect, incidental or consequential loss or damage arising out of your use (or inability to use) the Site. While we make reasonable efforts to keep the Site accurate and available, we do not guarantee uninterrupted access or freedom from errors.

9.6 Governing Law and Jurisdiction

These Terms & Conditions, and your use of this Site, are governed by the laws of the Republic of Kenya. You submit to the non-exclusive jurisdiction of the Kenyan courts.

9.7 Amendments

We may update these Terms & Conditions and Privacy Policy from time to time. We will post the new version on the Site and indicate the "Last Revised" date. Continued use of the Site after such updates constitutes acceptance of the changes.

10. Links to Other Websites

Our Site may contain links to external websites over which we have no control. We are not responsible for their content, privacy practices or policies. We encourage you to review their terms and policies before providing any personal information.

11. Data Breach and Cyber-Incident Response

In the event of a data breach or cyber-security incident, we will take steps to contain the incident, assess the impact and notify you and/or relevant regulatory authorities as required under Kenyan law. We abide by the obligations of the Computer Misuse and Cybercrimes Act regarding reporting and cooperation with investigations.

12. Contact Us

If you have questions or wish to exercise your rights, please contact:

Morara, Apiemi & Nyangito Advocates
The Mirage, Tower 2, Mezzanine 2 Suite 10, OPP Chiromo Junction
Nairobi, Kenya
Email: info@moraranyangitoadv.co.ke
Telephone: +254 740 490 487
Attn: Data Protection Officer / Firm Administrator