Nzuri Strategy is a certified small business consulting firm dedicated to empowering organizations through expertly designed online surveys, sophisticated data analysis, and actionable strategic recommendations, underpinned by robust project and program management. We ensure that our comprehensive approach captures critical data and delivers sustainable strategic outcomes.
This policy outlines how we collect, process, and store personal data in compliance with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Kenya’s Data Protection Act (DPA).
Data Processors
For the purposes of compliance with data protection regulations, Nzuri Strategy is the controller of the personal data shared with us – that is, we decide why and how we process your personal data. When Nzuri Strategy collects data for its own business purposes (e.g., newsletter signups, consultations), it acts as a data controller. When processing personal data on behalf of clients (e.g., through customized surveys), Nzuri Strategy acts as a data processor and follows the instructions of the data controller (our client). For further information regarding privacy and data protection, please contact info@nzuristrategy.com.
We also work with various third-party service providers to process personal data. For instance, when collecting data via forms or scheduling consultancy sessions, we utilize Google Forms, Microsoft Forms, or Calendly as our data processors. These providers are responsible for securely handling personal data according to data privacy requirements.
Types of Personal Data we Process
The type and amount of personal data we collect depends on the purposes for which we will need to use it and will include:
Non-sensitive personal information used for identification and maintaining communication with you including details such as your name and contact information (email address, organization, job title/designation, and country). This information is obtained to facilitate communication with you in instances where you have granted Nzuri Strategy the permission to process your data. This includes individuals acting in their professional capacity (e.g., consultants, researchers, or client representatives).
Communication exchanged between us, for instance, if you send us an email or written correspondence.
How We Collect Data
We may collect your personal data in the following ways:
Information provided directly by you: for example, the information you share with us when you reach out to us through our website, social media pages, or email.
Information collected when you use our website: when you use our website, some limited information about you is recorded and stored temporarily. For more information, see the ‘Google Analytics’ section below.
Google Analytics: Nzuri Strategy uses Google Analytics to collect statistics for sections of our website and other platforms. This data will be utilized to enhance user interfaces and web services for visitors. Google Analytics retrieves information from your browser to gather data on your activities on www.nzuristrategy.com. To restrict this access, you can opt out of cookies by disabling them in your browser’s settings or by downloading and installing the Google Analytics opt-out browser add-on. For more information on Google’s practices, you can visit the following link: https://policies.google.com/technologies/partner-sites.
Cookies and Tracking Technologies: Our website uses cookies to enhance user experience and gather analytics data. Where required by law, we present a cookie consent banner enabling users to opt in or out of non-essential cookies.
Publicly accessible information: this includes information you provide from interactions with us on public media including social media, articles on media platforms such as Medium.com, and/or newsletters.
Personal information:
Your personal data may be received if an individual within your organization appoints you as a contact person.
We may also collect information from various electronic forms that we host on our website as well as third-party platforms such as Google Forms, Microsoft Forms, Calendly, or any other provider.
Social media and digital content: Nzuri Strategy maintains a record of data from our social media platforms, which may encompass contact details provided by following us on LinkedIn, in feedback or comments on posts on LinkedIn, or third-party blog posts. If you opt to share our digital content via social networks like Facebook, Twitter, and LinkedIn, or view a video on a third-party media platform (such as YouTube), cookies from these third-party applications may be sent to you. The setting of these cookies is not controlled by Nzuri Strategy; we recommend that you refer to the third-party websites for guidance on managing their cookies
How We Use Personal Data
We handle personal data relying on the lawful basis of legitimate interest or consent. The collected data is solely utilized for communication purposes and providing you with information or the services for which you have requested. We do not employ automated decision-making or profiling methods. Nzuri Strategy does not sell personal data to third parties.
Our Legal Basis for Processing Your Information
In compliance with the legal requirements of data protection, we have a lawful basis for processing your personal data. We may rely on any of the following legal bases to process your personal data, depending on the purpose for which we use your data:
Consent and Transparency: We may process your personal data when you have provided clear, explicit consent for us to do so for a specific purpose, such as booking a consultancy session or receiving an e-mail communication from you.
Performance of a Contract: Processing your personal data may be necessary for fulfilling the terms of a contract or agreement, such as delivering the services you have requested.
Legal Compliance: We may process your personal data to comply with legal obligations, such as keeping records for tax purposes or responding to lawful requests from regulatory authorities.
Legitimate Interests: We may process your personal data when it is necessary for the legitimate interests of our organization, such as improving our services, provided that these interests are not overridden by your rights or interests.
How We Disclose Data
We do not disclose personal data to third parties unless it is essential for our business operations or as mandated by law. We carefully choose all third-party service providers and furnish them with the minimal information required to deliver their services. Any sharing of data with third parties is conducted in accordance with international data protection regulations and with suitable data protection measures implemented. All such third parties are bound by contractual obligations, including Data Processing Agreements where required, to ensure the security and confidentiality of your personal data.
How We Store Data
Personal data is securely retained within our systems, which may involve transferring data across continents. In instances of such transfers, we guarantee that data protection measures adhere to all the applicable data protection and privacy standards. Information is stored solely for the duration necessary to fulfill the intended purposes for which it was gathered or as mandated by law. We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and contractual obligations. For example, contact form submissions are retained for up to 24 months, unless further engagement is needed.
Your Rights
As the data subject, you possess rights to access your personal data, request corrections, seek the deletion of your data (right to be forgotten), and object to the processing of your data. These rights can be exercised by contacting us at info@nzuristrategy.com.
You have the following legal rights over your personal data:
Right of Access (Subject Access Request): You can obtain a copy of the personal data we hold about you and the information about how we process your data.
Right to Rectification: You can ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer needed for its original purpose. Upon receiving a written request, the organization will review and process the deletion as long as the request aligns with applicable laws and contractual obligations. The organization reserves the right to verify the identity of the requesting party before processing the request.
Right to Restrict Processing: You can request us to limit the use of your personal data in certain situations, such as when you believe your data is inaccurate and requires verification.
Right to Object: You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer needed for its original purpose. Upon receiving a written request, the organization will review and process the deletion as long as the request aligns with applicable laws and contractual obligations. The organization reserves the right to verify the identity of the requesting party before processing the request.
Right to Data Portability: You can request to have your personal data transferred to you or another party in a machine-readable format. This right applies to automated information you provided consent for or that was used to fulfill a contract with you.
Right to Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw that consent. Withdrawal of consent does not affect the lawfulness of data processing before consent was withdrawn.
Additional Rights Under Local Laws
Residents of California have the right to request disclosure of the categories of personal data collected and to opt out of the sale of personal data, where applicable. Nzuri Strategy does not sell personal data.
Kenyan residents have rights under the Kenya Data Protection Act, including the right to be informed of data use, to object to processing, and to lodge complaints with the Office of the Data Protection Commissioner.
Please note that some of these rights may be subject to safeguards, limitations, or exemptions as per relevant regulations.
How to Complain
If you have any concerns regarding our handling of your personal data, you have the option to file a complaint with the supervisory authority in your country. However, you can reach us at info@nzuristrategy.com.
In the European Union, complaints can be lodged with your national Data Protection Authority. In Kenya, complaints can be submitted to the Office of the Data Protection Commissioner (ODPC) at https://www.odpc.go.ke..
Changes to Privacy Policy
We retain the right to adjust this privacy policy at any time. Any alterations will be published on our website, and we will inform data subjects accordingly. Where legally required, we will notify affected individuals of material changes to this policy.
Contact
For any questions or concerns regarding this privacy policy, please contact us info@nzuristrategy.com.
