1. Introduction

Mary Wangari (“we”, “us”, “our”) operates the website www.marywangari.com, offering coaching, consulting, and related professional services based in Nairobi, Kenya. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, submit an enquiry, make a payment for our services, or subscribe to our newsletter and marketing communications.

This Policy is issued in accordance with the Data Protection Act, 2019 (Kenya) and its subsidiary regulations, as enforced by the Office of the Data Protection Commissioner (ODPC). By using our website, you consent to the practices described in this Policy.

2. Information We Collect

2.1 Information you provide to us

• Contact and enquiry form details: name, email address, phone number, and message content.
• Booking/consultation details: preferred session dates, service of interest, and any background information you choose to share.
• Payment information: billing name, billing address, and payment card or mobile money details, processed via our third-party payment gateway.
• Newsletter and marketing sign-up details: name and email address, and your communication preferences.

2.2 Information collected automatically

• Technical data such as IP address, browser type, device type, and operating system.
• Usage data such as pages visited, time spent on the site, and referring website.
• Cookies and similar tracking technologies (see Section 7).

3. How We Use Your Information

We use the personal data we collect for the following purposes:

• To process and confirm consultations, coaching sessions, or service bookings.
• To process payments securely through our payment service provider.
• To respond to enquiries submitted through our contact forms.
• To send booking confirmations, receipts, and service-related communications.
• To send newsletters, promotions, and marketing communications, where you have opted in.
• To improve our website, services, and client experience.
• To comply with legal, tax, and regulatory obligations.
• To detect, prevent, and address fraud, security, or technical issues.

4. Legal Basis for Processing

In line with the Data Protection Act, 2019, we process your personal data on the following legal bases:

• Consent — for newsletter and marketing communications, and non-essential cookies.
• Contractual necessity — to process bookings, consultations, and payments you request.
• Legal obligation — to meet tax, accounting, and regulatory requirements.
• Legitimate interests — to maintain website security and improve our services, balanced against your rights.

5. Payment Information

Payments made through www.marywangari.com are processed by licensed third-party payment service providers (which may include mobile money and card payment processors operating in Kenya). We do not store full payment card numbers on our servers. Payment providers process your payment data in accordance with their own privacy and security policies, and applicable Payment Card Industry Data Security Standard (PCI DSS) requirements.

6. Newsletter and Marketing Communications

If you subscribe to our newsletter or opt in to marketing communications, we will use your name and email address to send you updates, offers, and promotional content about Mary Wangari. You may withdraw your consent and unsubscribe at any time by clicking the “unsubscribe” link in any marketing email or by contacting us directly using the details in Section 12. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to operate essential site functions, remember your preferences, analyse site traffic, and support marketing efforts. You can control or disable cookies through your browser settings; please note that disabling essential cookies may affect the functionality of our booking forms and website.

8. Sharing of Your Information

We do not sell your personal data. We may share your information with:

• Payment service providers, to process transactions.
• IT, hosting, and website service providers, who process data on our behalf.
• Email marketing platforms, to deliver newsletters and promotions.
• Government authorities and regulators, where required by law.
• Professional advisors, such as auditors or legal counsel, where necessary.

All third parties who process personal data on our behalf are required to implement appropriate safeguards and to process such data only in accordance with our instructions and applicable law.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to meet legal, accounting, or reporting requirements. Booking, consultation, and payment records are typically retained for the period required under Kenyan tax and financial regulations. Newsletter subscriber data is retained until you unsubscribe or request deletion.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Under the Data Protection Act, 2019, you have the right to:

• Be informed of the use to which your personal data is to be put.
• Access your personal data held by us.
• Request correction or rectification of inaccurate or outdated data.
• Request deletion of your personal data, subject to legal retention requirements.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before responding to your request.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:

• Mary Wangari, Nairobi, Kenya
• Website: www.marywangari.com

You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data protection rights have been violated.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated effective date. We encourage you to review this Policy periodically.