Last updated: June 24, 2025
Romer Services Limited is a leading data governance consultancy firm based in Kenya. We specialize in offering tailored data protection services to organizations, helping them navigate compliance, implement best practices, and manage personal data responsibly. Our marketing efforts are designed to keep our clients and prospects informed about our products, services, thought leadership content, and industry developments.
We value your privacy and are dedicated to protecting your personal information in accordance with the Kenya Data Protection Act (2019) and other applicable laws.
This Privacy Policy describes our policies and procedures on the collection, use and disclosure of your information when you interact with our Services and tells you about your privacy rights and how the law protects you.
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Personal Information will differ based on our relationship (e.g. Members, Employees, Business Partner, Prospective Members) including the type of communications between us and the services we provide. Most of the personal information we process is provided to us directly by you through sources such as:
Personally identifiable information may include, but is not limited to:
Usage Data is collected automatically when using the website. Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the time and date You visit our website, the time spent on the page, unique device identifiers and other diagnostic data.
When You access the website by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our website or when You access the website by or through a mobile device.
The Company may use Personal Data for the following purposes:
We may share Your personal information in the following situations:
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service.
Typically, for consumer financial products, the retention period is seven 7 years.
You have the following rights regarding your personal data:
These rights are subject to applicable laws. Requests are free, and we will respond within one month. Contact us at privacy@romer.co.ke to exercise these rights.
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to and maintained on computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.
Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.
The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.
Prior to transferring personal data outside Kenya, we shall ascertain that the transfer is based on the provided legal and regulatory standards. Circumstances in which we may transfer your personal data outside Kenya are highlighted in the table below;
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.
Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
Your information is securely stored Zoho Severs.
Information security is extremely important to us. We put in place technical and physical security measures to keep Personal Information safe and secure. If, despite our efforts, you believe that Personal Information is no longer secure, please tell us so that we can resolve any security issue.
Romer Services Limited uses appropriate technical, physical, legal and organisational measures, which comply with data protection laws to keep Personal Information secure. As most of the Personal Information we hold is stored electronically we have implemented appropriate IT security measures to ensure this Personal Information is kept secure.
For example, we may use anti-virus protection systems, firewalls, and data encryption technologies. We have procedures in place at our premises to keep any hard copy records physically secure. We also train our staff regularly on data protection and information security.
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
If You have concerns about Our use of Your personal information, please contact Us at:
You may also lodge a complaint with the Office of the Data Protection Commissioner:
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and update the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy, You can contact us: