Privacy Policy

We collect information in four distinct ways, and the difference between them matters.

Information you give us directly

When you use a form on this website, call us or send an email, we receive the details you choose to provide. On our forms that is your name, organization, email address, telephone number and the description of your enquiry.

Information we receive on instruction

When a client instructs us on a matter, we receive information about that matter. This often includes personal information about individuals who are not themselves our clients, such as claimants, witnesses or subjects of an enquiry.

Information gathered during an investigation

In the course of an instructed investigation we collect and verify information from sources available to us. What is collected depends entirely on the instruction and on what is necessary to answer the questions we have been asked.

Technical information

Our web host records standard server log information such as IP address, browser type and the pages requested. This is ordinary web server activity used for security and troubleshooting, not to build a profile of you.

We collect and use information only for the following purposes:

• To respond to an enquiry and assess whether we are able to assist
• To carry out an investigation we have been instructed on
• To prepare and deliver investigative reports to the instructing client
• To meet legal, regulatory and professional obligations that apply to us
• To keep this website secure and functioning correctly

We do not sell information. We do not add enquiry details to a marketing list, and we do not use them for anything unrelated to the enquiry you made.

Forms on this website send an email to our team. The details are not published, are not shared beyond the people handling the enquiry, and are not added to any mailing list.

Please do not submit highly sensitive personal or investigative information through a website form. Once we are in touch, we can agree a more appropriate channel for anything sensitive.

To protect the forms from automated abuse, our server briefly records a one-way cryptographic value derived from the connection used, together with the time of submission. That value cannot be reversed to identify you, and it contains none of your message. It is discarded automatically after a short period.

Investigative work is confidential by its nature. Information we receive on an instruction is treated as belonging to the instructing client, and is handled on that basis.

• Access to matter information is limited to the people working on that matter
• Our people are expected to treat every instruction as confidential
• We do not discuss instructions with third parties, and we do not confirm whether a particular instruction exists, except where the client authorises it or the law requires it

Information is held in the systems we use to manage matters and correspondence, and access to it is restricted to those who need it for the matter in hand.

Investigative findings are recorded so that each one can be traced back to how it was established. Where we act on a client instruction, we handle personal information on that client behalf and in line with that instruction.

We disclose information only in the following circumstances:

• To the client who instructed the matter, as part of our reporting to them
• To service providers who support our operations, such as our email and IT providers, and only to the extent needed for them to provide that service
• Where we are required to do so by law, by a court order, or by a lawful request from a body entitled to make one
• Where you have asked us to, or agreed that we may

We do not sell, rent or trade personal information, and we do not pass enquiry details to anyone for their own marketing purposes.

We take technical and organisational measures appropriate to the nature of the information we hold. These include restricting access to matter files, controlling who within the business can see what, and serving this website over an encrypted connection.

No method of transmission or storage is completely secure, and we do not claim otherwise. This is why we ask that highly sensitive material is not sent through the website form, but shared instead through a channel agreed with our team.

We do not claim to hold any particular security certification or accreditation. Where a client requires specific assurances about how their information will be handled, those can be agreed as part of the engagement for that matter.

We keep information only for as long as there is a reason to.

• Enquiries that do not lead to an instruction are kept only as long as needed to deal with them, and for a reasonable period afterwards in case you come back to us
• Matter files are kept for as long as needed for the purpose they were collected for, and for any period required by law or by a professional obligation
• Technical server logs are kept only for the short period needed for security and troubleshooting

When information is no longer required, it is deleted or securely destroyed. We do not retain investigative information for longer than is necessary.

Under applicable Kenyan data protection law you may ask us to:

• Tell you what personal information we hold about you
• Correct information that is inaccurate or incomplete
• Delete information, where we are not required to keep it
• Restrict or object to certain uses of your information
• Withdraw your consent, where our handling of the information relies on it

These rights are not absolute. Where we hold information as part of an investigation carried out on a client instruction, or where the law requires us to keep it or not to disclose it, we may be unable to act on a request, or may need to refer it to the instructing client. We will tell you what we are able to do.

To make a request, contact us using the details below. We may need to verify your identity before we can respond, so that we do not disclose information to the wrong person.

This website sets one cookie. It is a session cookie that keeps our forms secure against cross-site request forgery, and lets us return what you typed if a form has to come back to you for correction. It is deleted when you close your browser.

We do not use advertising cookies, and we do not run third-party analytics or tracking on this site.

The site does load its typefaces from Google Fonts, which means your browser makes a request to servers operated by Google and Google receives your IP address as part of that request. If you would prefer to avoid this, blocking third-party requests in your browser will leave the site perfectly usable.

We may update this policy from time to time to reflect changes in how we work or in the law that applies to us. The date shown at the top of this page is the date it was last changed.

If you have a question about this policy, or about information we may hold, please contact us:

If you have a concern about how we have handled your information, please raise it with us first so that we have the opportunity to look into it and put it right.