Privacy Policy

This Privacy Policy explains how Oswago Business Advisory Ltd, trading as Oswago & Associates (“we”, “us” or “our”), handles personal information through our website and accounting, bookkeeping, payroll, tax compliance and advisory services.

1. Who We Are

Oswago & Associates provides accounting and business support services in Kenya.

For questions about this policy or requests concerning your personal information, contact:

Email: info@oswagoandassociates.co.ke
Telephone: +254 705 097 881
Website: https://oswagoandassociates.co.ke/

For enquiries and the administration of our business, we determine how personal information is used. When handling records on a client’s instructions—for example, employee payroll information—we may act as a data processor on that client’s behalf. Our role depends on the particular service and engagement.

2. Information We Collect

Depending on your interaction with us, we may receive:

• Contact and enquiry information: your name, email address, telephone number, business name, industry and details of the assistance you request.

• Client and engagement information: correspondence, service agreements, billing details and information needed to manage our working relationship.

• Accounting and compliance records: transaction records, invoices, bank or M-Pesa statements, tax information and supporting documents relevant to an agreed service.

• Information about other individuals: employee, director, customer or supplier information supplied by a client where needed for bookkeeping, payroll or compliance work.

• Website usage information: pages visited, interactions, referral sources, approximate location, browser and device information collected through website technologies, including Google Analytics.

Some client records may contain sensitive personal information. Please provide only information relevant to your enquiry or agreed service. Do not submit passwords, one-time security codes or unnecessary financial documents through the general website enquiry form.

3. How We Receive Information

We receive information directly when you complete our forms, contact us, engage our services or share documents.

We may also receive information from your authorised representatives, your organisation, or systems you authorise us to access. Website usage information may be collected automatically when you browse the website.

If you provide information about employees, customers or other individuals, you should have an appropriate basis for sharing it and provide them with the notices required for that sharing.

4. Why We Use Information

We use personal information, as relevant, to:

• Respond to enquiries and assess the support you need.

• Prepare proposals and administer client engagements.

• Deliver agreed accounting, bookkeeping, payroll, reporting and tax services.

• Communicate about records, deadlines, invoices and ongoing work.

• Meet applicable legal obligations and respond to lawful requests.

• Protect our systems, prevent misuse and resolve disputes.

• Understand website usage and improve our website.

Required form fields help us respond to your request. If essential information is not provided, we may be unable to respond fully or deliver a requested service.

5. Grounds for Processing

Depending on the purpose, we rely on consent, steps requested before entering a contract, performance of a contract, applicable legal obligations, or legitimate interests such as managing enquiries and protecting our business, where those interests do not override your rights.

Where consent is required, it should relate to the specific use of your information. Merely visiting our website does not constitute consent to every form of processing.

You may withdraw consent by contacting us. Withdrawal does not affect processing lawfully undertaken before withdrawal.

6. Storage and Service Providers

We use Google Drive to store client documents. Information may also be handled through communication tools and accounting systems relevant to your engagement.

Information may be shared, where necessary, with:

• People authorised to carry out your engagement.

• Technology providers supporting document storage, website hosting, communications or accounting services.

• Your authorised representatives or professional advisers.

• Public authorities where disclosure is required or otherwise lawfully permitted.

The information shared should be limited to what is needed for the relevant purpose.

7. Processing Outside Kenya

Cloud services, including Google services, may process information on infrastructure outside Kenya.

Any international transfer must meet applicable Kenyan data-protection requirements, including appropriate safeguards or another permitted transfer basis. You may contact us for information about the arrangements relevant to your records.

8. Cookies and Google Analytics

Our website uses Google Analytics to understand how visitors find and use the website. Analytics may involve cookies and similar technologies that measure visits, pages viewed, device or browser characteristics and interactions.

Cookies may also support essential website functions and remember privacy preferences.

You can manage cookies through your browser settings and the website’s cookie-preference controls where available. Blocking some cookies may affect website functionality.

For information about Google’s handling of data, visit:

https://policies.google.com/privacy

9. How Long We Keep Information

Retention depends on the type of information and why it was collected. Relevant factors include:

• Whether an enquiry or engagement remains active.

• Applicable accounting, tax and other recordkeeping obligations.

• Contractual responsibilities and client instructions.

• The need to resolve disputes or establish, exercise or defend legal claims.

Information should not be retained indefinitely without a continuing purpose. When it is no longer needed, it should be deleted or anonymised, subject to applicable obligations and backup arrangements.

Contact us if you need information about the retention period applicable to your records.

10. Protecting Information

Protecting client information is part of our responsibility. Safeguards must be proportionate to the information handled and the risks involved, including appropriate access restrictions and secure handling arrangements.

No website, cloud platform or method of transmission is entirely risk-free. If you suspect that information shared with us has been accessed or disclosed improperly, contact us promptly.

11. Your Rights

Subject to applicable law and relevant exceptions, you may request information about how your personal data is used, access to it, correction of inaccuracies, or deletion where there is no lawful reason to retain it.

You may also have rights to object to or restrict processing, withdraw consent, and receive or transfer certain information in a portable format.

Send requests to info@oswagoandassociates.co.ke. We may need proportionate information to verify your identity or authority before disclosing or changing records.

Where we process information on a client’s behalf, we may need to coordinate your request with that client.

You may raise a complaint with Kenya’s Office of the Data Protection Commissioner (ODPC). You do not have to contact us first.

Website: https://www.odpc.go.ke/

12. External Websites

Our website may link to third-party websites or platforms. Their handling of personal information is governed by their own privacy notices. Review those notices before sharing information with them.

13. Changes to This Policy

We may update this policy when our services, processing practices or applicable requirements change. The latest version will be available on this page, with its revision date. Where required, we will provide additional notice of material changes.