Effective date: 1 October 2026
Jozary IQ is committed to protecting the privacy and personal information of individuals who visit our website, use our digital governance solutions, request our services or otherwise interact with us.
This Privacy Policy explains how Jozary IQ collects, uses, stores, discloses and protects personal data in connection with our website, digital governance platform, professional services and business operations.
We seek to handle personal data lawfully, fairly, transparently and securely, in accordance with the applicable laws of Kenya, including the Data Protection Act, 2019 and applicable regulations.
This Policy should be read together with any applicable service agreement, professional engagement letter, platform terms or other privacy notice relevant to your engagement with Jozary IQ.
For the purposes of this Policy, “Jozary IQ”, “we”, “us” and “our” refer to the entity operating the Jozary IQ website and services.
The identity of the data controller or data processor may depend on the service concerned and the nature of the processing activity.
Depending on how you interact with us, we may collect the following categories of personal data:
This may include your name, email address, telephone number, organisation, professional title and other contact details you provide.
We may collect information contained in enquiries, demonstration requests, feedback, correspondence, service requests and other communications you send to us.
Where you use our digital governance solutions, information processed may include user accounts, access permissions, meeting schedules, agendas, board papers, minutes, resolutions, voting records, director comments, action points and system activity logs.
The information processed will depend on the platform functionality enabled and the instructions or configuration provided by the relevant client.
Where you request a company secretary, mediator or arbitrator, we may collect information necessary to understand your requirements, assess professional suitability and availability, conduct conflict checks and arrange a proposed engagement.
This may include the nature of the assignment, relevant parties, preferred dates, professional requirements and contact details.
Depending on the website configuration, we may collect IP addresses, browser and device information, usage logs, cookies and similar technical information.
We may process information necessary to manage client relationships, contracts, billing, professional engagements, training and compliance obligations.
Please provide only the information reasonably necessary for the relevant purpose.
We may collect personal data:
Where information is provided about another individual, the person providing it should have an appropriate lawful basis and authority to do so.
We may process personal data for the following purposes:
We will not use personal data for purposes incompatible with the purpose for which it was collected unless a lawful basis permits the additional processing.
We process personal data only where a lawful basis applies under applicable law.
Depending on the circumstances, this may include:
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before the withdrawal.
Where we rely on another lawful basis, consent will not necessarily be required.
Jozary IQ recognises that board and corporate governance records may contain confidential commercial information and personal data relating to directors, officers, employees, shareholders and other stakeholders.
Where our digital governance platform processes information on behalf of a client, the client may determine the purposes for which the information is processed, while Jozary IQ may act as a data processor under the applicable contractual arrangements.
In such circumstances, we will process personal data in accordance with the applicable agreement, documented client instructions and relevant legal requirements.
We seek to support appropriate safeguards, which may include access permissions, user authentication, confidentiality arrangements, system logs and other security measures appropriate to the platform and the information concerned.
Clients remain responsible for ensuring that they have an appropriate lawful basis and authority to upload personal data and board documents to the platform.
AI-assisted functionality, where enabled, is intended to support administrative and analytical tasks. It does not replace the independent judgement and accountability of directors, company secretaries or other authorised decision-makers.
The use of third-party AI services, if any, must be assessed and disclosed as appropriate before the relevant functionality is deployed.
When you request a company secretary, mediator or arbitrator, we may process information necessary to assess the request, establish the scope of the assignment, identify professional requirements and facilitate a proposed engagement or appointment.
For mediation and arbitration requests, we may need limited information about the parties and the nature of the dispute to conduct preliminary suitability and conflict checks.
Please do not submit detailed pleadings, confidential settlement proposals, privileged documents or extensive personal information through general website enquiry forms.
Where further information is necessary, we will advise you on the appropriate channel and process.
Once a professional is engaged or appointed, additional contractual, professional, procedural and legal obligations may apply. The handling of information will depend on the nature of the appointment, the applicable rules and the parties' agreements.
A request submitted through our website does not itself appoint a professional or establish a professional-client relationship.
We may disclose personal data where necessary, lawful and appropriate to:
We will seek to limit disclosures to information reasonably necessary for the relevant purpose.
Where third-party providers process personal data on our behalf, we will implement appropriate contractual and other safeguards as required by applicable law.
We do not sell personal data.
Some technology providers may store or process personal data outside Kenya.
Where personal data is transferred outside Kenya, we will take steps to ensure that the transfer complies with applicable law and that required safeguards are in place.
The safeguards applied will depend on the destination, nature of the information, service provider and applicable legal requirements.
Before this Policy is published, Jozary IQ should verify its hosting arrangements, technology providers and any international data transfers.
We take reasonable and appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration or disclosure.
Depending on the service and systems involved, measures may include:
No method of electronic storage or transmission is completely secure. We therefore cannot guarantee absolute security, but we seek to maintain safeguards appropriate to the risks involved.
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal, regulatory, professional and contractual requirements.
Retention periods may vary according to the type of information, the service provided, the existence of a continuing engagement, and any applicable limitation or record-keeping requirements.
Where information is no longer required, we will take appropriate steps to delete, anonymise or otherwise securely dispose of it, subject to any lawful requirement to retain it.
Specific retention periods should be set out in our internal retention schedule and, where appropriate, in client agreements.
Our website may use essential cookies and, where enabled, analytics, functionality or preference cookies.
Essential cookies may be required for the website to function properly. Non-essential cookies will be managed in accordance with applicable legal requirements, including any required notice or consent mechanism.
The cookies and similar technologies actually used will depend on our website configuration.
Visitors should be able to access relevant information about cookies and available preferences where required.
Subject to applicable law and any lawful limitations, you may have the right to:
To exercise a right or make a privacy enquiry, email info@jozaryiq.com with the subject line “Privacy Request.”
We may need to verify your identity and clarify the nature of your request before responding. We will handle requests within the timeframes required by applicable law.
Some requests may be subject to lawful limitations, including obligations to retain certain records or protect the rights of other individuals.
We may send information about our services, events, training and updates where permitted by applicable law.
Where consent is required, we will obtain it before sending the relevant communications.
You may opt out of marketing communications at any time using the unsubscribe mechanism provided or by contacting info@jozaryiq.com.
Opting out of marketing will not prevent us from sending essential communications relating to an existing engagement or service where necessary.
Our website may contain links to external websites, embedded content or third-party services.
Those services may have their own privacy policies and data-handling practices. We encourage you to review their notices before providing personal data.
This Policy does not automatically apply to processing carried out independently by third parties.
Our services are primarily intended for organisations, professionals and adult users.
We do not knowingly seek to collect children's personal data through general website enquiry forms. If you believe that a child has provided personal data to us, please contact us so that we can assess the matter and take appropriate action.
If you have concerns about our handling of personal data, please contact us at info@jozaryiq.com so that we can review the matter.
You may also have the right to lodge a complaint with the Office of the Data Protection Commissioner in Kenya.
Website: https://www.odpc.go.ke
We may update this Privacy Policy to reflect changes in our services, technology, data-handling practices or applicable law.
The latest version will be published on our website with the applicable review or effective date.
We encourage visitors and clients to review this Policy periodically.
For questions, requests or concerns relating to this Privacy Policy or our handling of personal data, contact:
Jozary IQ
Effective date: 1 October 2026