01Who we are
FSK Advisory ("FSK", "we", "us") is an advisory and management firm based in Nairobi, Kenya, serving clients across East Africa and beyond. For the information described in this policy, FSK is the data controller — meaning we decide why and how it is handled.
We comply with Kenya's Data Protection Act, 2019. Where they apply to you, we also follow the EU General Data Protection Regulation (GDPR) and the Australian Privacy Principles (APPs) under the Privacy Act 1988.
This policy covers people who visit our website or contact and enquire with us. If you go on to become a client, we also handle personal information to deliver our services — the details of that are set out in our engagement terms rather than here, which keeps this policy short and easy to read.
02What information we collect
When you visit our website
We use Google Analytics to understand how the site is used. This collects technical and usage information such as your device and browser type, the pages you view, how you arrived at the site, and an approximate (city-level) location based on your IP address. This is done using cookies — see section 04.
When you contact us
If you use our enquiry form, email us, or call us, we collect the details you give us — typically your name, email address, phone number, the name of your business, and whatever you tell us in your message.
When you become a client
If we take on work for you, the personal information we collect to deliver that engagement is governed by our engagement terms, not this website policy.
03Why we use your information
We only use personal information for clear reasons, each with a lawful basis under Kenya's Data Protection Act (section 30) and, where it applies, Article 6 of the GDPR:
- To respond to your enquiries and discuss working together — because it is in our legitimate interest, or to take steps toward a contract at your request.
- To run, secure, and improve our website — for our legitimate interest in a working website, and (for analytics cookies) with your consent.
- To meet legal, tax, and regulatory obligations — where the law requires it.
We do not sell your personal information, and we do not make decisions that significantly affect you using automated processing alone.
04Cookies & analytics
Cookies are small files stored on your device. We use a small number of them, mainly for Google Analytics, to see how visitors use the site so we can improve it. When you first visit, our cookie banner lets you accept or decline these non-essential cookies, and you can change your choice at any time using the "Cookie preferences" link in the footer or your browser settings. Declining will not stop the site from working.
05Who we share your information with
We share personal information only when there's a good reason to, and we never sell it. We may share it with:
- Service providers who help us operate — for example website hosting, Google Analytics, IT and cloud providers, and (where relevant) payment processors. They may only use the data to provide their service to us, under confidentiality and data-protection terms.
- Professional advisers such as auditors or lawyers, where needed.
- Authorities or regulators where we are legally required to disclose information.
Within FSK, only the people who need the information to do their work can access it.
06Sending data outside your country
Some of our providers process data outside Kenya — for example, our website host, Google Analytics, and cloud hosting may store or process information in regions such as South Africa, the European Union, and the United States. When personal data crosses a border, we rely on the safeguards the law allows: transfers to countries with adequate protection, contractual protections such as standard contractual clauses, or your consent.
For individuals in Australia: where we disclose personal information to an overseas recipient, we take reasonable steps to ensure it is handled in a way consistent with the Australian Privacy Principles, as required by APP 8.
07How long we keep it
We keep personal information only for as long as we need it for the purposes above — for example, we keep enquiry details for as long as it takes to deal with your request and a reasonable period afterwards — then delete it. Where the law requires us to keep certain records for longer, we do.
08Keeping your information safe
We use reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access. No method of storage or transmission is ever completely secure, but we work to protect your data and to respond quickly if something goes wrong. If a data breach is likely to put your rights at risk, we will notify the relevant regulator and, where required, you — in line with the law.
09Your rights
Depending on where you live, you have rights over your personal information. Under Kenyan law, the GDPR, and the Australian Privacy Principles these include the right to:
- Be informed about how we use your data — which is what this policy is for.
- Access the personal information we hold about you.
- Correct information that is wrong or incomplete.
- Delete your information in certain circumstances.
- Object to or restrict how we use it, including objecting to any direct marketing.
- Portability — receive certain data in a portable format.
- Withdraw consent at any time, where we relied on your consent.
To exercise any of these, contact us using the details in section 13. We'll respond within the time required by the applicable law (under the GDPR, normally within one month). Using these rights is free, and you can ask us without identifying yourself where the law allows.
10Children
Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has given us their information, please contact us and we will delete it.
11Complaints
If you're unhappy with how we've handled your personal information, please contact us first — we'd genuinely like the chance to put it right. You also have the right to complain to a regulator:
- Kenya — Office of the Data Protection Commissioner (ODPC), Britam Towers, Upper Hill, Nairobi; www.odpc.go.ke.
- EU / EEA / UK — your local data protection authority.
- Australia — Office of the Australian Information Commissioner (OAIC); www.oaic.gov.au.
12Changes to this policy
We may update this policy from time to time. When we do, we'll change the "last updated" date at the top, and the current version will always be available on this page.
13Contact us
For any privacy question or to exercise your rights, contact our data protection contact:
- FSK Advisory — Rotterdam Mall, Shell Kerarapon, Ngong Road, Nairobi, Kenya
- Email: info@fskadvisory.com
- Phone: +254 710 544 544
- Data protection contact: Legal, FSK Advisory