Regulatory Governance

Privacy Policy

Effective Date: September 2026 • Compliant with Kenya Data Protection Act, 2019

1. Overview & Data Controller

Mudhai Margaret operates this portfolio, consulting, and marketing ecosystem architecture platform (https://www.mudhaimargaret.co.ke). In accordance with the Kenya Data Protection Act (KDPA), 2019, I act as the Data Controller regarding personal and commercial data gathered directly through our digital interfaces.

2. Categories of Data We Collect

Direct Executive Submissions: Contact names, business email addresses, corporate telephone/WhatsApp numbers, enterprise names, challenge descriptions, and budget indicators provided via our executive briefing forms or Google Calendar appointment schedulers.
Diagnostic & Readiness Assessments: Commercial responses submitted through The Growth Ecosystem Diagnostic Checklist™, used to compute scaling readiness and bottleneck analyses.
Automated Analytical Telemetry: Aggregated, anonymized web traffic telemetry collected via Google Tag Manager and Google Analytics 4 (session lengths, referrer paths, and technical interaction events).

3. Principles & Lawful Basis for Processing

Under Part IV of the Kenya Data Protection Act, 2019, your data is processed strictly under the lawful bases of:

Explicit Consent: Provided voluntarily when submitting briefing forms or booking discovery consultations.
Contractual Preparation: Required to formulate statements of work (SOW) or retainers.
Legitimate Interests: Securing platform infrastructure and preventing spam or fraudulent inquiries.

4. Cookies & Telemetry Integration

We utilize minimal cookies to evaluate website traffic patterns and diagnostic performance. No sensitive personally identifiable information (PII) is sold, traded, or cross-referenced with non-authorized third-party tracking brokers. You may adjust cookie preferences within your browser settings at any time.

5. Your Rights Under the Kenya Data Protection Act, 2019

As a data subject in the Republic of Kenya, you possess legal entitlements under Part IV, Section 26 of the Act:

Right to AccessRequest formal confirmation and copies of personal data maintained in our records.

Right to RectificationDemand immediate updates to inaccurate, incomplete, or outdated information.

Right to ErasureRequest permanent deletion of your data when no longer required for advisory delivery.

Right to RestrictionObject to or restrict specific processing operations pending statutory review.

6. Data Retention & Inquiries

Inquiry submissions and diagnostic responses are retained for a maximum of 24 months to support ongoing advisory historical comparisons, after which they are securely purged.

To exercise any statutory rights or file inquiries, contact the Data Protection Officer directly at:info@mudhaimargaret.co.ke or via phone at +254 792 728 742.