How this site handles your data.

Who we are

This website, lizlenjo.com, is the personal website of Liz Lenjo, Advocate of the High Court of Kenya. Liz Lenjo is the data controller for the personal data collected through it, under the Data Protection Act, 2019 (Kenya).

Advisory work is carried out by MyIP Legal Studio, which has its own terms and privacy notice.

What we collect, and why

Speaking and advisory enquiries

Your name, email address, the type of engagement and the event details you choose to share. We use them only to reply to your enquiry and to arrange the engagement. Lawful basis: your request (steps before entering a contract) and our legitimate interest in replying.

Liz Notes by email

Your email address and, if you signed up from a post, which post. We use it only to send new posts. You confirm your subscription by email, and every email has a way to unsubscribe. Lawful basis: your consent.

Comments

Your name, email address and comment. Your name and comment are published once approved. Your email address is never published. Lawful basis: your consent, given when you post.

Reading statistics

Anonymous counts of how many people read a post and how many reach the end. These counts are not linked to you. We use Cloudflare Web Analytics, which does not use cookies or track you across sites.

Spam protection

The enquiry and comment forms use Cloudflare Turnstile to tell people from bots. Comments are also checked by an automated spam classifier running on Cloudflare’s network before Liz reviews them. No decision with legal or similarly significant effect is made automatically: every comment is reviewed by a person.

Cookies

Public pages set no cookies. The site remembers your preferred text size for Liz Notes in your browser’s local storage; it never leaves your device. The private Workroom, used only by Liz, uses a Cloudflare Access sign-in cookie.

Who we share it with

We do not sell or rent personal data. We use a small number of service providers to run the site: Cloudflare (hosting, database, storage, security and analytics) and Resend (sending emails). They process data on our instructions. Some of their servers are outside Kenya; where data leaves Kenya, we rely on the safeguards these providers offer, as the Act requires.

How long we keep it

Enquiries: up to two years after our last contact, unless an engagement follows. Newsletter: until you unsubscribe. Comments: for as long as the post is online, or until you ask us to remove yours.

Your rights

Under the Data Protection Act, 2019 you can ask to be informed about how your data is used, to access it, to correct it, to have it deleted, and to object to its use. To make a request, use the enquiry form on the home page and choose “Advisory”, or reply to any email from us. We will respond within the time the Act allows.

If you are unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Changes

We will update this page if anything changes, and show the date at the top.