What information does MAKL collect?

"Personal data" or "personal information" means any information about an identified or identifiable natural person such as a person’s full name, identity card number, date of birth, gender, physical and postal address, phone number, location data, an online identifier. It does not include data where the identity has been removed (anonymous data). When you visit our website, we collect and use personal information (including and not limited to contact details, device information, and usage data) for purposes such as:

How does MAKL collect your Data?

MAKL collects personal data using the following methods:

• Direct Interactions

  • Applying for our products or services

  • Creating an account on our website

  • Subscribing to newsletters or publications

  • Requesting marketing communications

  • Entering competitions or surveys

  • Contacting us directly

• Automated Technologies

  As you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. This is collected using cookies, server logs, and similar technologies. Please see our Cookies Policy for more details.

• Third Parties or Public Sources

  We may receive personal data about you from analytics providers, advertising networks, or publicly available sources.

Information collected from other sources

Our website uses cookies for performance-related purposes. Users have the option to accept or decline these cookies upon visiting the site. One can read about the cookies we collect here: https://makl.co.ke/privacy-policy
We collect information to analyse the performance of our websites and how different parts of our website are used. For example, we use Google Analytics to do this. Google Analytics collects non-personally identifiable information through a tag on our websites, including how users arrive and interact with our site, the devices they use, the time spent, and visitor demographics and interests.
MAKL does not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
MAKL has set our analytics not to expire i.e. the information will be retained in order to allow us to analyse trends in our website usage over time.

Legal basis for processing your data.

MAKL processes your personal data in line with the lawful bases provided in Section 30 of the Data Protection Act, 2019, including:

• Consent, where required

• Performance of a contract

• Compliance with legal obligations

• Legitimate interests, provided they do not override your rights and freedoms

• Due to the nature of our business, we share your personal information with empanelled service providers only

• MAKL does not share your personal data with other third parties for unrelated purposes unless you provide explicit consent.

Whether MAKL Needs Your Consent

Under the Data Protection Act data may not be processed without the consent of the data subject, and it is the duty of the data controller or processor to demonstrate that such consent was granted for a specific purpose. Consent may be withdrawn at any time without affecting the lawfulness of prior processing, and it must be freely given, with consideration as to whether the provision of a service or contract was made conditional upon it. Processing of children’s data requires the consent of a parent or guardian and must serve the child’s best interests, except where counselling or child protection services are provided. Further, personal data may not be used for commercial purposes unless the data subject has given express consent or such use is authorized by law, in which case the subject must be informed at the time of collection.

How Long Your Personal Information Will Be Kept

Under Section 39 of the DPO requires retention of data only as long as reasonably necessary to satisfy the purpose for which it was collected unless the retention is:

• Required by law

• Reasonably necessary for a lawful purpose

• Authorized or consented by the data subject

• For historical, statistical, journalistic literature and art or research purposes

Any data that has been retained beyond the retention period is to be anonymized. This provision is worded in mandatory terms in line with parliament’s objective not to identify a data subject for longer than is necessary.

Your Rights Under Kenyan Law

Under the Data Protection Act under section 26, 2019, you have the following rights:

• Right to be informed about the collection and use of your personal data

• Right of access to the personal data we hold about you

• Right to rectification of inaccurate or incomplete data

• Right to erasure (the "right to be forgotten")

• Right to object to processing, especially for direct marketing

• Right to data portability

• Right not to be subject to automated decision-making

• Right to withdraw consent, where consent is the basis of processing

To exercise these rights, please contact us at [email protected] and provide:

• Sufficient information to identify you

• Proof of identity (e.g., copy of a valid ID)

• Details of the information or action you are requesting

Lodging a Complaint

If you believe your data protection rights have been violated and MAKL has not adequately addressed your concerns, you may contact:
Office of the Data Protection Commissioner (ODPC)
Website: https://www.odpc.go.ke
Email: [email protected]

Data Security

MAKL implements reasonable and appropriate technical and organisational measures to protect your personal data from:

• Unauthorised access

• Accidental loss or destruction

• Unlawful processing

Access to your data is limited to personnel who have a legitimate business need and are bound by confidentiality obligations. We have procedures in place to handle any suspected data breach and will notify you and the ODPC where legally required.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with this privacy notice. You may contact the DPO at: [email protected]

Changes to This Privacy Notice

This privacy notice was last updated on 10th September 2025. MAKL keeps this policy under regular review and may update it from time to time. Any changes will be posted at: https://makl.co.ke/privacy-policy. Please revisit this page periodically to stay informed.

How to Contact Us

📧 [email protected] – For all data protection enquiries
📧 https://makl.co.ke/feedback-form – To report website issues
For details on the cookies we use, please refer to our Cookies Policy.