Privacy Policy

1. Who We Are

Strategy Room Africa is a healthcare marketing and growth agency based in Nairobi, Kenya. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit strategyroomafrica.co.ke or engage our services.

2. Information We Collect

Information you provide directly:

• Contact form submissions (name, email, phone, organisation, message)
• Inquiry and onboarding details provided during a service engagement
• Email address if you subscribe to The Briefing Room newsletter

Information collected automatically:

• Browser type, device type, and operating system
• Pages visited, time spent, and referral source
• IP address (anonymised where possible)
• Cookie data (see our Cookie Policy)

3. How We Use Your Information

• To respond to inquiries and manage service engagements
• To send The Briefing Room newsletter (only if you opted in)
• To improve Site performance and user experience
• To comply with legal obligations

We do not sell, rent, or trade your personal information to third parties.

4. Legal Basis for Processing

We process your personal data based on: (a) your consent where required; (b) the performance of a contract when you engage our services; (c) our legitimate interests in operating and improving our business; and (d) compliance with applicable law.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law. Contact form submissions are retained for up to 24 months. Client engagement data is retained for the duration of the engagement plus 5 years for accounting and legal purposes.

6. Data Sharing

We may share your data with trusted service providers who assist us in operating our Site and delivering our services (e.g., email platforms, CRM tools, analytics providers). All processors are contractually bound to handle your data securely and only for the purposes we specify. We do not share data with advertisers.

7. International Transfers

Some of our service providers are based outside Kenya. Where data is transferred internationally, we ensure appropriate safeguards are in place consistent with applicable data protection laws.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Withdraw consent at any time (e.g., unsubscribe from newsletter)
• Lodge a complaint with the relevant data protection authority in your jurisdiction

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. No transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Children

Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this Policy periodically.

12. Contact

Data-related enquiries: hello@strategyroomafrica.co.ke or via our contact page.