Privacy Policy

Effective Date: April 2026

Last Updated: April 2026

At Pedo & Associates, we take your privacy seriously. This policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have. We are committed to handling all client data with the highest level of confidentiality and professionalism.

1. Who We Are

Pedo & Associates is a professional firm offering accounting services, audit and tax advisory services to transform your business finances.

We are the Data Controller responsible for the personal and business information you share with us.

Contact Details:

2. What Data We Collect

We collect only the information necessary to deliver our professional services.

Personal Data

  • Full name
  • Email address
  • Phone number
  • Physical / postal address

Business & Financial Data

  • Tax PIN / KRA registration details
  • Financial statements and records
  • Payroll information
  • Business registration documents
  • Banking or invoicing details (where applicable)

Website & Technical Data

  • IP address
  • Cookies and session data
  • Device and browser information
  • Website usage analytics

3. How We Collect Your Data

We collect information through the following means:

  • Direct submissions — forms, emails, and in-person or virtual consultations
  • Website contact forms — when you reach out through our website
  • Cookies and tracking tools — automatically collected when you visit our website
  • Third-party integrations — such as analytics platforms or CRM systems used to manage client relationships

4. Why We Collect Your Data

Your data is collected and used for the following legitimate purposes:

  • Providing tax advisory, audit, and compliance services
  • Filing tax returns and submissions to regulatory bodies (e.g., KRA)
  • Responding to your enquiries and managing client communications
  • Managing and maintaining our client relationships
  • Meeting legal and regulatory obligations under Kenyan law
  • Internal record keeping and continuous service improvement
  • Monitoring and improving website performance and user experience

5. Legal Basis for Processing

We process your data on the following legal grounds:

  • Consent — where you have given us clear permission to process your data
  • Legal obligation — where we are required to do so by law (e.g., KRA regulations, tax statutes)
  • Contractual necessity — to fulfil our service agreement with you
  • Legitimate business interests — to operate, improve, and manage our firm responsibly

6. How We Share Your Data

We will only share your data in the following circumstances:

  • Kenya Revenue Authority (KRA) and other government or regulatory bodies, where legally required
  • Authorised staff and consultants within our firm, strictly on a need-to-know basis
  • Trusted third-party service providers (e.g., cloud storage, accounting software, IT support) — bound by confidentiality obligations

We do not sell, rent, or trade your personal or business data to any third party for commercial purposes. Ever.

7. How We Protect Your Data

The confidentiality and security of your data is our top priority. We have implemented the following safeguards:

  • Secure, access-controlled digital storage systems
  • Data access restricted to authorised personnel only
  • Encryption of sensitive data where applicable
  • Strict confidentiality obligations for all staff and contractors
  • Regular review of our data security practices

8. How Long We Keep Your Data

We retain your data only for as long as it is necessary:

  • For the duration of our working relationship and any post-engagement legal obligations
  • As required by Kenyan law — for example, tax records are typically retained for a minimum of 5 years in line with KRA and statutory requirements

Once data is no longer required, it is securely deleted or anonymised.

9. Your Rights

Under applicable data protection law, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request that inaccurate or incomplete data be corrected
  • Deletion — request that your data be deleted, where legally permissible
  • Withdraw consent — at any time, where processing is based on consent
  • Object — to certain types of processing in specific circumstances

To exercise any of these rights, please contact us using the details in Section 14.

10. Cookies & Website Tracking

Our website uses cookies to improve your experience. Cookies are small text files stored on your device that help us understand how visitors use our site.

We use cookies for:

  • Session management — to keep your interaction with our site smooth
  • Analytics — through tools such as Google Analytics, to understand site traffic and improve content
  • Performance monitoring — to identify and resolve technical issues

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of some parts of our website.

11. Third-Party Services

To deliver efficient, modern services, we may use trusted third-party platforms, including:

  • Cloud storage providers (e.g., Google Drive, Microsoft OneDrive)
  • Accounting and tax software (e.g., QuickBooks, iTax portal)
  • Email and communication tools
  • Payment processors (where applicable)

All third-party providers are carefully selected and are required to maintain appropriate data protection standards.

12. International Data Transfers

Where your data is processed or stored outside Kenya (for example, on internationally hosted cloud platforms), we ensure that appropriate safeguards are in place to protect your data in line with Kenyan data protection standards and equivalent international frameworks.

13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or best practices.

When we make significant changes, we will notify you by:

  • Email (for existing clients)
  • A notice on our website

The date at the top of this policy indicates when it was last updated. We encourage you to review it periodically.

14. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us:

We are committed to responding to all privacy-related enquiries promptly and professionally.

Pedo & Associates — Trusted. Confidential. Professional.