Privacy Policy

1. Who We Are

​

LGM Health Advisory ("we," "us," or "our") is a Kenyan multidisciplinary health advisory firm providing services in medico-legal advisory, clinical governance, healthcare quality, financial and tax advisory, corporate wellness, claims optimisation, and workforce development. Our registered place of business is Nairobi, Kenya.

​

We operate this website at lgmhealthadvisory.org.

​

For any questions relating to this Privacy Policy or how we handle your personal data, you may contact us at:

​

Email: lgmhealthadvisory@gmail.com

Website: lgmhealthadvisory.org

​

​

2. Our Commitment to Your Privacy

​

We take the privacy of every person who interacts with LGM Health Advisory seriously. This Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

​

We operate in compliance with the Kenya Data Protection Act, 2019 (DPA 2019), the regulations made under it, and, where applicable to international users, the principles of the General Data Protection Regulation (GDPR). As a firm that works in Kenya's healthcare sector, we are acutely aware that data protection is not only a legal obligation but a matter of professional trust.

​

3. What Personal Data We Collect

​

We collect personal data only where it is necessary for a legitimate purpose.

 

The categories of data we may collect include:

​

Contact and inquiry data: When you submit an enquiry through our website contact form, send us an email, or book a consultation, we collect your name, email address, phone number, organisation or role, and the content of your message.

​

Client and engagement data: When we enter a professional relationship with you or your organisation, we may collect additional information, including job title, organisation details, engagement scope, and correspondence records necessary to deliver our services.

​

Website usage data: When you visit our website, we may automatically collect technical data, including your IP address, browser type, device type, pages visited, and time spent on the site. This is collected through standard web analytics tools for the purpose of improving our website and understanding how it is used.

​

Communications data: If you subscribe to our newsletter, blog, or advisory series, we collect your name and email address for that purpose.

​

We do not collect sensitive personal data (such as health records, financial account credentials, or government identification numbers) through our website.

Any sensitive information shared in the course of a professional advisory engagement is governed by a separate engagement agreement and confidentiality undertaking.

​

​

4. How We Use Your Data

​

We use personal data for the following purposes:

​

To respond to your enquiries and communications: When you contact us, we use the information you provide to respond appropriately and follow up as needed.

​

To deliver our advisory services: Where you or your organization has engaged LGM Health Advisory, we use relevant personal data to perform the services agreed, maintain records, and communicate with you throughout the engagement.

​

To send advisory content and updates: Where you have consented or requested it, we use your contact details to send you our advisory notes, blog posts, and relevant updates. You may withdraw this consent at any time.

​

To improve our website and services: We use aggregated, anonymised analytics data to understand how our website is used and to improve its content, navigation, and performance.

​

To comply with legal obligations: We may process your data where we are required to do so by applicable law, a court order, or a regulatory body.

​

​

5. Legal Basis for Processing

​

Under the Kenya Data Protection Act, 2019, and where GDPR applies, we process your personal data on the following legal grounds:

​

1. Consent: Where you have expressly consented to receiving communications or to a specific use of your data.

2. Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

3. Legitimate interests: Where processing is necessary for our legitimate business interests, such as responding to enquiries, improving our website, and marketing our services to professionals in the healthcare sector, provided those interests are not overridden by your fundamental rights.

4. Legal obligation: Where we are required to process data to comply with a legal or regulatory requirement.

​

​

​

7. International Data Transfers

​

LGM Health Advisory is based in Kenya. If you access our website or services from outside Kenya, your data may be transferred to and processed in Kenya. Where we transfer data internationally, we take steps to ensure that adequate protections are in place in accordance with applicable data protection law.

​

​

8. Data Retention

​

We retain personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law.

​

• Enquiry and contact data is typically retained for up to 24 months from the date of last contact.

• Client engagement data is retained for the duration of the engagement and for a period of up to seven (7) years thereafter, in line with standard professional records retention obligations.

• Website analytics data is retained in aggregated, anonymized form and does not identify individual users.

​

When personal data is no longer required, we delete or anonymize it securely.

​

​

9. Cookies and Tracking Technologies

​

Our website may use cookies and similar tracking technologies to improve your browsing experience and collect analytics data. Cookies are small text files stored on your device when you visit a website.

​

We use the following types of cookies:

​

• Strictly necessary cookies: Required for the website to function. These cannot be disabled.

• Analytics cookies: Used to understand how visitors interact with our website. These are set only with your consent.

​

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of our website.

​

Where required by law, we will request your consent before placing non-essential cookies.

​

​

10. Your Rights

​

Under the Kenya Data Protection Act, 2019, you have the following rights in relation to your personal data:

​

• The right to be informed about how your data is used, as set out in this Policy.

• The right of access to the personal data we hold about you.

• The right to rectification of any inaccurate or incomplete data we hold.

• The right to erasure of your data where there is no longer a lawful basis for us to hold it.

• The right to restrict processing in certain circumstances.

• The right to data portability where processing is based on consent or contract and carried out by automated means.

• The right to object to processing based on legitimate interests.

• The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing.

​

To exercise any of these rights, please contact us at lgmhealthadvisory@gmail.com. We will respond within 21 days as required under the DPA 2019.

​

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC) at odpc.go.ke.

​

​

11. Data Security

​

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include secure email practices, access controls, and regular review of our data handling procedures.

​

However, no method of transmission over the internet is completely secure. While we take every reasonable precaution, we cannot guarantee the absolute security of data transmitted to or from our website.

​

​

12. Children's Privacy

​

Our website and services are directed at healthcare professionals, organizations, and adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

​

​

13. Links to Third-Party Websites

​

Our website may contain links to external websites. This Privacy Policy applies only to lgmhealthadvisory.org. We are not responsible for the privacy practices or content of any third-party sites and encourage you to read their respective privacy policies.

​

​

14. Changes to This Policy

​

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically.

​

​

15. Contact Us

​

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

​

LGM Health Advisory

​

Email: lgmhealthadvisory@gmail.com

Website: lgmhealthadvisory.org

Location: Nairobi, Kenya

​

​