Privacy policy

1. Who we are

   Business Report is an independent Kenyan business publication ("we", "us", "the publication"). This policy explains how we handle personal data when you read the site, subscribe to a newsletter, send us a tip, or contact us.

   This policy is written to reflect the Kenya Data Protection Act, 2019. If you have a question about it, or wish to exercise any of the rights described below, contact us using the details at the end.

2. What we collect

   When you subscribe to a newsletter, we collect the email address you provide and the date you subscribed. When you send a tip or contact the newsroom, we collect whatever you choose to include — which may be your name and contact details, but need not be; the tip line works anonymously.

   When you simply read the site, our hosting and delivery providers process technical data such as your IP address, browser type, and the pages you request, as an ordinary part of serving a website securely. We do not use advertising trackers or third-party analytics cookies.

3. Why we use it, and our lawful basis

   We use your email address only to send the newsletter you asked for, and to let you manage or cancel that subscription. Our lawful basis is your consent, which you give when you subscribe and can withdraw at any time.

   We use the contents of a tip or enquiry to consider, verify and, where appropriate, report a story, and to reply to you. Our lawful basis is our legitimate interest in journalism and the public interest in a free press.

   We use technical delivery data to operate the site, keep it secure, and diagnose faults. Our lawful basis is our legitimate interest in running a functioning, safe website.

4. Who we share it with

   We do not sell your personal data, and we do not share it for anyone else’s marketing. We use a small number of service providers to run the publication, and they process data only on our instructions: our web host and content delivery network, and the platform that stores newsletter subscriptions and tip submissions.

   We may disclose personal data if we are required to by law, or where it is necessary to protect a source, a person, or the publication. We resist unlawful or overbroad demands for data, including for information that could identify a confidential source.

5. How long we keep it

   We keep newsletter subscriptions until you unsubscribe, after which we remove your address from the active list. We keep tips and correspondence for as long as they are relevant to a story or to our records, and then delete or anonymise them.

   Technical delivery logs are kept only as long as our providers retain them for security and operational purposes.

6. Your rights

   Under the Data Protection Act you have the right to be informed about how your data is used, to access the data we hold about you, to have inaccurate data corrected, to have your data deleted, and to object to or restrict certain processing. You can unsubscribe from any newsletter in one click, using the link in every email.

   To exercise any of these rights, contact us using the details below. We will respond within the time the law allows. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

7. Cookies

   The reading experience does not require cookies, and we do not set advertising or cross-site tracking cookies. If we introduce any cookie that is not strictly necessary to operate the site, we will ask for your consent first and update this policy.

8. Changes to this policy

   We may update this policy as the publication grows or the law changes. When we make a material change we will update the date at the top of this page.

9. 9. Contact

   For any privacy question, or to exercise your rights, write to news@businessreport.co.ke, or use our contact page.

This policy is provided in good faith and reflects the site as currently built. It is not legal advice. It should be reviewed by a qualified adviser and registered with the Office of the Data Protection Commissioner before launch.