Privacy Policy

Last Updated and Effective as of: 10 September 2026

Your use of the Website is also governed by our Terms of Usage. Those Terms contain disclaimers, limitations, rules concerning permitted use, and other provisions that may affect your rights and responsibilities when using East Africa Legal Insight. Please review them together with this Privacy Policy. By using the Website, you acknowledge this Privacy Policy and the Terms of Usage, subject to any rights that cannot lawfully be waived.

Table of Contents

·      Introduction

·      Cookie Notice and Cookie Policy

·      Children’s Privacy

·      Links to Third Party Websites and Services

·      How We Collect and Use Your Personal Information

·    Use of the Website Information Collected Automatically and Other Information

·      Your Rights and Choices

·      How We Respond to Do Not Track Signals

·      Children’s Privacy

·      Additional Child Directed Services or Applications

·      Security of Your Information

·      Data Storage and Retention

·      Consent to Processing and Transfer of Information About You

·      United States State Privacy Rights

·      European Data Subject Rights

·      European Representative and Data Protection Officer

·      Copyright

·      Business Transfers

·      Acceptance of Privacy Policy Terms and Conditions

·      Questions Comments or Complaints

Introduction

Your privacy is important to East Africa Legal Insight. This Privacy Policy explains how personal information may be collected through https://www.eastafricalegalinsight.com, including its articles, pages, contact and correction channels, comments or submissions where enabled, translation tools, analytics, advertising and related Website functions. It explains how information may be used, disclosed, stored and protected, and how you may exercise choices or rights under applicable law. It does not govern information collected by unrelated third parties or by services that have their own privacy policies.

Using the Website and providing information to us is generally voluntary. You may read much of the Website without creating an account or giving us personal information. If you contact us, request a correction, propose an article, submit material or use another feature that asks for information, you may choose not to provide it, but we may then be unable to respond or provide the requested feature. Cookie and advertising choices may also affect how some Website functions operate.

The Website is a general audience legal publication and is not directed to children under thirteen (13) years of age. We do not intentionally request personal information from children through ordinary Website use. If a parent or guardian believes that a child has provided personal information in circumstances requiring action, please contact us using the address at the end of this Policy.

Privacy practices may change as the Website, its features, its service providers or applicable law changes. When we update this Privacy Policy, we will change the date shown at the beginning and provide any additional notice required by law.

Cookie Notice and Cookie Policy

The Website uses cookies and similar technologies. These may include small files placed on a browser or device, pixels, tags, web beacons, local storage, device identifiers and log files. They may support essential Website functions, security, translation, analytics, advertising, performance measurement and user preferences. Further information and choices are described in the Website’s Cookie Policy and in the sections below.

Children’s Privacy Compliance

East Africa Legal Insight does not intentionally solicit personal information from children under thirteen (13) years of age through ordinary Website use. The Website is not directed to children and should not be used to send confidential, privileged or sensitive information. Some third-party services supporting the Website may apply their own child-privacy rules and may automatically process technical information as described in their policies.

The Website does not currently provide a school subscription, child-focused learning service or child-directed application. Any future feature of that kind would require a separate review of the information collected, consent requirements, age limits and applicable law before it is introduced.

If you believe that we have collected personal information from a child in circumstances that require deletion or other action, please contact us at [email protected].

How We Collect and Use Your Personal Information

We seek to limit personal information to what is reasonably necessary for the Website’s publication, communication, editorial and administrative activities. Information you provide may include your name, email address, organisation, professional role, message, correction request, contribution, attachment or other information you choose to send. We do not sell personal information for money. You may read many articles and pages without registering or submitting personal information.

·      Subscriptions User Registrations and Mobile Applications

The Website does not presently require a user account or offer a paid subscription or mobile application as part of the ordinary reading experience. If East Africa Legal Insight later introduces accounts, subscriptions, newsletters or an application, information such as a name, email address, account details, device information and preferences may be processed to administer the feature, provide requested benefits, communicate with the user, maintain security and comply with law. The existence of a Blogger subscription widget, an email-follow feature or a future account function should not be assumed to mean that East Africa Legal Insight currently maintains a subscriber database. Before publication, confirm whether any account, subscription, registration, saved-content function, mobile application, login, password reset process or member profile exists. If none exists, this section should be deleted rather than left as a general possibility. If one exists, identify the exact fields collected, the purpose for each field, the service provider that hosts or processes it, the communication preferences available to the user and the procedure for closing the account.

·      Promotions Competitions and Other Special Features

If we introduce a competition, promotion, survey, registration feature or other special activity, we will collect only information voluntarily submitted for that activity and will explain any additional rules, purposes, recipients, retention period or consent requirement that applies. Do not retain this section unless the Website actually offers such a feature.

·      Newsletters

If the Website offers an email newsletter or subscription alert, we may collect an email address and limited delivery information to send the requested communication, measure delivery and improve the service. The email service provider and its identity should be named here before publication. A newsletter or alert service may also create provider-side records such as delivery status, bounce information, opens, clicks, unsubscribe requests, approximate location or device information. Those records may be used to maintain list hygiene, prevent abuse and measure whether a requested communication was delivered. They should not be described as being collected by East Africa Legal Insight unless the provider makes them available to the Website operator. Confirm whether the Website sends any recurring email and whether a separate consent record is kept.

You may unsubscribe from a newsletter by using the link in the relevant email or by contacting [email protected]. Do not retain this paragraph unless a newsletter or subscription email is actually enabled.

·      Communications from East Africa Legal Insight and Approved Third Party Partners

If you choose to provide an email address or other personal information, you may receive communications connected with your request, Website administration, corrections, contributions, collaborations, research or other activity you initiated. Promotional or partner communications should be sent only where a lawful basis and any required consent exist. Contact initiated by a reader is different from marketing. A response to a correction request, research enquiry, collaboration proposal or technical report may be necessary to deal with the request. A later invitation to subscribe, attend an event, buy a product or receive partner material is a separate purpose and may require a separate consent or opt-out mechanism. The Website should not use a contact address collected for editorial purposes as a marketing list unless the intended use was clearly explained and a lawful basis exists.

o   Emails relating to a request, correction, contribution or Website administration;

o   Emails highlighting new articles, legal developments, research resources or Website changes; and

o   Special offers or marketing messages

  •   From East Africa Legal Insight about its own publication, education or related activities; and
  • §  From an approved third party only where you have expressly opted in or otherwise given permission where required by law.

Where permitted, we may use an email service provider to deliver messages on our behalf. The provider, tracking technologies and retention period must be confirmed before this paragraph is used. You may opt out through the unsubscribe mechanism in the message or by contacting [email protected]. If an email provider is used, confirm whether it stores the address, delivery logs, suppression lists, tracking pixels, browser information or other metadata; where those records are stored; how long they are retained; whether the provider acts on instructions from East Africa Legal Insight or uses information for its own purposes; and whether the provider transfers information internationally. Do not name a provider merely because the Blogger template contains a generic subscription element.

·      Surveys

We may occasionally invite readers to participate in an online survey. Participation will be voluntary, and the notice for the survey should explain what information is collected, why it is needed, whether responses are identifiable and how long they are retained. Survey answers may reveal opinions about legal developments, institutions or public policy and may therefore deserve careful handling even where they are not legally classified as sensitive information. The survey notice should state whether a respondent can be identified, whether free-text answers may be published, whether a third party hosts the survey, how withdrawal works and whether a participant may skip questions without losing access to the Website.

·      Games and Quizzes

The Website does not currently appear to offer games or quizzes. If it does, information about interactions, scores, usernames, device identifiers or other participation data must be described here before publication. A quiz or interactive legal exercise may also produce an identifiable combination of answers, timestamps, device data and referral information. If scores or usernames are displayed publicly, the notice must explain that consequence before participation. If the Website has no such feature, the heading and paragraphs should be removed from the published policy.

·      Purposes for Processing Personal Information Provided Directly by You

We may process information you provide to respond to messages, correction requests, collaboration enquiries, media enquiries, technical reports, article contributions and other communications; to consider material for publication; to administer Website features; to protect accuracy, security and legal rights; and to comply with legal or regulatory requirements. We may use service providers to support hosting, email, translation, analytics, security, advertising or other Website functions, subject to applicable law and appropriate arrangements.

To carry out these activities, East Africa Legal Insight may rely on a lawful basis recognised by the law applicable to the particular processing, including where:

o   necessary to respond to a request, perform an arrangement with you or provide a feature you have requested;

o   necessary for our legitimate interests, or those of a service provider, where those interests are not overridden by your rights and freedoms;

o   necessary to comply with a legal obligation or establish, exercise or defend legal claims;

o   necessary to protect a person’s vital interests or the public interest where the law permits;

o   you have made the information public or have otherwise clearly authorised the relevant use; or

o   you have consented to the processing, with the ability to withdraw consent where applicable without affecting earlier lawful processing.

We may also use technical and usage information to operate, secure, analyse, maintain and improve the Website; understand readership and performance; identify abuse or invalid activity; manage translation and advertising; communicate Website changes; and protect the rights, safety and integrity of East Africa Legal Insight, its readers and contributors.

You may update information you have provided or change a consent or communication preference by contacting [email protected], subject to any verification and legal limits that apply.

·      Payment Card Information

The Website does not presently appear to request payment card details through its ordinary pages. If paid products, subscriptions, donations or events are introduced, payment information should be collected through a suitable payment processor rather than ordinary email, and the processor, purpose, storage location and security arrangements must be identified here. East Africa Legal Insight should never ask a reader to send a card number, security code, password or similar financial credential through the contact address. If a third-party provider later processes payments, the provider’s terms and privacy policy should be made available at the point of payment. The Website operator should know whether the provider acts as an independent controller, how refunds and disputes are handled and what limited payment records remain available to the operator.

Links to Third Party Websites and Services

The Website may contain links to laws, courts, institutions, academic resources, social-media platforms, advertising services, databases or other third-party websites. Those services may collect information through their own cookies, scripts, pixels, forms or other technologies. East Africa Legal Insight does not control their content, security, availability or privacy practices. A link or reference does not necessarily imply endorsement.

This Privacy Policy does not govern information collected directly by a third-party service after you leave the Website, follow an external link, interact with an embedded feature or use a third-party tool. Please review the relevant third party’s privacy policy and terms before providing personal information.

Use of the Website Information Collected Automatically and Other Information

Like many websites, East Africa Legal Insight and providers supporting the Website may automatically process technical and usage information. This may include an IP address, browser and device type, operating system, language, approximate location, referring page, pages viewed, timestamps, interactions, diagnostic information, cookie or local-storage identifiers and information about advertising delivery or interaction. We use this information for security, performance, analytics, translation, advertising and other purposes described in this Policy and the Cookie Policy. Automatically collected information may be generated even where a reader never completes a form. For example, a hosting platform may record a request, a browser may store a preference, a security system may assess unusual traffic and an advertising service may record an impression or interaction. These records can help keep pages available and protect the Website from automated abuse, but they may also constitute personal information where a person can reasonably be identified. The Website should therefore avoid saying that all such information is anonymous.

The Website uses Blogger and Google services, including Google Analytics and Google AdSense where enabled. These services may place or read cookies, process technical information and produce reports about Website use or advertising. The current Website configuration identifies a Google Analytics property and an AdSense publisher account. Confirm that these services remain enabled and that the descriptions and provider links in the Website’s Cookie Policy are current before publication.

We may work with analytics providers, advertising networks, security providers and other technical providers that process information through automated means. The information may include usage data, approximate location, device or browser information, traffic sources, page activity, diagnostic information and advertising identifiers. We do not intentionally obtain personal profiles from data brokers. Any provider that receives information beyond ordinary platform operation should be identified in the Cookie Policy or in this section. Before naming a third party, confirm whether it receives information through a direct script, a Blogger function, an embedded resource, an advertising auction, a consent tool or a link that the reader chooses to follow. A provider appearing in a page source does not necessarily mean that the Website operator receives every category of data processed by that provider. The final policy should distinguish information East Africa Legal Insight receives from information a provider processes independently.

Please refer to the Website’s Cookie Policy and the Your Rights and Choices section below for more information.

·      Purposes for Processing Information Collected Automatically and Other Information

We may use and disclose information collected automatically for operating, securing, measuring, supporting, improving and administering the Website, unless it is personal information under applicable law. If we combine automatically collected information with information you provide, we will treat the combined information as personal information and handle it according to this Policy and applicable law.

On the basis of a lawful ground that applies, we may use technical and usage information to understand readership, diagnose problems, monitor performance, prevent abuse, maintain security, produce statistics, improve content and navigation, measure advertising, support translation and identify broad patterns that do not require us to know the identity of a particular reader. Any use for personalised advertising or cross-site profiling should be confirmed against the current Website configuration and applicable consent requirements. Analytics and advertising should also be separated in the Website’s configuration and description. A measurement tool may be configured to reduce retention, disable advertising features or limit the use of precise location. An advertising tool may use a cookie, contextual information or an identifier to select an advertisement. The applicable notice should describe the configuration actually used, not every feature offered by the provider. Any material change in this configuration should trigger a review of the Cookie Policy and any consent mechanism.

o   Relevant Content and Recommendations

Where Google Analytics or another analytics service is enabled, we may review reports about page views, traffic sources, reading patterns, time spent, device information and interactions to understand readership and improve legal information and Website design. Analytics reports should be configured to reduce direct identification where the provider permits. Do not describe demographic, interest or personalised recommendation features unless those features are enabled and lawfully configured.

o   Advertising and Interest Based or Behavioural Advertising

The Website may display contextual or personalised advertising through Google AdSense or another advertising provider. Advertising may help support free access to legal information. Providers may process information such as an IP address, browser or device information, cookie identifiers, approximate location, page activity and advertising interactions. Personalised advertising must be subject to any consent, opt out or restricted processing choice required by applicable law. Google AdSense may support contextual or personalised advertising depending on account settings, visitor location, consent signals and Google’s own policies. The presence of an AdSense publisher identifier shows that an account is configured, but it does not by itself establish every advertising practice that may occur on every page or for every reader. Confirm whether automatic ads are enabled, whether ads appear on all pages, whether a consent-management platform is used and whether non-personalised advertising is available where required.

Participation in an industry consent framework or use of a particular consent-management platform is not confirmed from the Website pages reviewed.

The Website’s current pages refer generally to Google advertising services, but do not establish the use of a separate advertising partner such as an ad-management network or publisher representative.

We will not describe the sharing of hashed email addresses, identity graphs, bid-request data or named advertising and identity providers unless those activities are actually enabled on the Website and have been reviewed for legal compliance. In particular, do not promise that a hashed email, IP address, cookie identifier or device signal is shared with a named provider unless the Website actually collects it for that purpose and the relevant legal notice explains the activity. A hash is not automatically anonymous, and a provider’s description of a service may cover several configurations that do not all apply to this Website.

Because the Website is intended to provide public legal information without charging readers for ordinary access, advertising may be used to support its operation. Where consent is legally required for non-essential cookies or personalised advertising, the relevant choice should be presented before that processing begins. The Website’s Cookie Policy explains the controls currently made available.

East Africa Legal Insight does not sell personal information for money. Advertising providers may nevertheless collect information directly through their own technologies when advertisements are displayed. Their processing is governed by their own policies, together with any choices offered through the Website, the browser, the provider’s controls or applicable law. A reader’s interaction with an advertisement may also be recorded by the advertising provider even if East Africa Legal Insight does not receive a name or email address. The Website operator should not state that it controls or deletes records held by the provider unless its contract and technical arrangements support that statement. Readers should be directed to the provider’s current privacy and advertising controls where those controls are relevant.

 

Marketing the Website

The Website does not appear to use a separate remarketing campaign or social-media pixel based on the pages reviewed. If East Africa Legal Insight later uses such tools to advertise the Website on another platform, the relevant provider, data categories, lawful basis and opt out mechanism must be added here.

o   Mobile Device Identifiers

When you access the Website from a phone or tablet, the Website and its providers may receive technical information associated with the device or browser. This may include an IP address, operating system, browser version, language, screen or device characteristics, identifiers supplied by cookies or local storage and usage information. The Website does not currently offer a dedicated mobile application.

o   Anonymous Aggregated Data

We may use or share aggregated or de-identified information for statistics, research, security, performance measurement, editorial planning and improvement of the Website, provided that the information is not reasonably used to identify a particular person. We do not treat information as anonymous merely because it has been given a label; the assessment depends on the information and the means reasonably available to identify someone.

Your Rights and Choices

The Website’s Cookie Policy describes cookies, pixels, web beacons, local storage and related technologies and explains the choices currently available. Depending on applicable law, you may also use browser settings, device controls, provider controls or a consent mechanism displayed on the Website to limit non-essential cookies, analytics or personalised advertising.

·      Browser Controls

You can configure your browser to refuse cookies, delete stored cookies or notify you before a cookie is placed. Blocking cookies may affect translation, analytics, advertising, preferences or other Website functions. Browser controls may not affect all technologies or provider-side processing, so review the Cookie Policy and relevant provider controls as well.

·       

o   To manage or delete browser cookies, please use the privacy or site-settings controls provided by your browser.

o   Flash cookies are an obsolete technology and are not intentionally used by the current Website.

·      Google Analytics and Google Advertising Settings

Where Google Analytics is enabled, you may review Google’s controls and information about how Google uses data from partner sites at https://policies.google.com/technologies/partner-sites. You may also manage advertising personalisation through Google Ads Settings at https://adssettings.google.com. These controls are operated by Google and may not remove all analytics or advertising processing.

·      Named Advertising and Identity Providers

The Website pages reviewed do not identify Index Exchange, LiveRamp or another named identity provider. Do not retain provider-specific opt out instructions unless the relevant provider is actually used on the Website.

o   Provider-specific opt out instructions should be inserted only after the provider and the relevant technology have been verified.

o   Provider-specific opt out instructions should be inserted only after the provider and the relevant technology have been verified.

·      Interest Based or Behavioural Advertising Opt Out Choices

You may be able to control interest based advertising through the advertising provider’s settings, a consent-management mechanism displayed on the Website, browser controls or an industry choice page. The correct mechanism depends on the providers actually used and your location.

An opt out may place a preference cookie or otherwise record a choice so that the relevant provider does not assign certain advertising identifiers. The operation and duration of any such choice depend on the provider.

·       

o   If you opt out of interest based advertising, you may continue to receive contextual or non-personalised advertising on a free, ad-supported Website. An opt out from one provider may not control processing by another provider.

o   If you delete browser cookies or change devices, you may need to make an advertising or consent choice again.

o   Information about industry advertising choices may be available through the Digital Advertising Alliance, the Network Advertising Initiative or other current regional programmes. Include a link only where the relevant provider participates and the link remains current.

o   The Website does not currently appear to offer a paid subscription that removes advertising. Do not retain any statement about upgrading to a paid service unless such a service is actually offered.

·      You may be able to opt out of personalised advertising through the controls provided by Google, another advertising provider, the Website’s consent mechanism or your browser. The correct options depend on the providers enabled and the law applicable to you.

o   Digital Advertising Alliance

o   Digital Advertising Alliance Canada

o   European Interactive Digital Advertising Alliance

o   Network Advertising Initiative

How We Respond to Do Not Track Signals

When you visit a website, standard information such as an IP address and device or browser information may be sent to the Website or to third-party content and service providers. Some browsers send Do Not Track or similar signals. Because there is no single technical standard that all services interpret in the same way, the Website may not respond to every such signal. Where a legally recognised preference signal applies and the relevant service supports it, we aim to configure controls consistently with applicable law.

Children’s Privacy

If you are under thirteen (13), please do not send personal information through the Website without the involvement and permission of a parent or legal guardian. The Website is a general audience legal publication and is not directed to children. We may remove information that we learn was submitted by a child in circumstances requiring action under applicable law.

East Africa Legal Insight does not knowingly collect or solicit personal information from children under thirteen (13) through ordinary Website use. If we learn that a child has provided personal information in circumstances requiring deletion, we will take reasonable steps to delete it or otherwise handle it as required by law. If you believe we hold such information, contact [email protected].

Additional Child Directed Services or Applications

The Website does not currently identify a separate child-focused application, learning service or child-directed product. The following paragraphs are retained only as a review placeholder in case East Africa Legal Insight operates or later introduces one. A separate child-focused product would change the risk and compliance analysis because a child’s information may be collected through an application, a registration form, a notification service, an interactive exercise or an analytics tool even where the main Website is intended for a general audience. The operator should document the intended age range, the reason the feature is directed to children, the information needed to operate it and the person responsible for responding to parents or guardians.

If a separate child-focused feature or application is introduced, it should have a dedicated privacy notice explaining what information is collected, how parental or guardian consent is obtained, what service providers are involved and how information is deleted.

Any alerts, notifications, profiles, lists, scores or sharing functions involving a child would require a separate assessment of age assurance, parental controls, publication settings, device permissions and applicable child-protection law.

·      Children’s Online Privacy Protection

Before launching a child-directed feature, East Africa Legal Insight would need to assess whether laws such as the United States Children’s Online Privacy Protection Act or another applicable child-privacy law applies, whether consent is required and whether third-party analytics or advertising are permitted. The assessment should also cover whether the service is directed to children, whether the operator has actual knowledge that children use it, whether an educational institution is involved, whether parental consent can be verified, whether consent records can be retrieved and whether the service uses advertising or profiling. These questions cannot be answered from the general Website pages reviewed and should not be answered by assumption.

If you believe that a child’s personal information has been collected through a separate child-focused feature, contact [email protected] and identify the feature and the information concerned.

·      Information Collection and Use

Information collected through a future child-focused feature would be used only for the purposes explained in its dedicated notice, such as operating the feature, maintaining security, responding to a parent or guardian and complying with law. It should not be rented or sold.

o   Information You Provide About Yourself or a Child

A parent or guardian might be asked to provide an email address or other information to give consent, manage an account or contact the operator. The feature should explain which information is required and what happens if it is not provided.

Parent or Guardian Email Address and Payment Information

No parent or guardian should provide payment information through ordinary email. If a paid child-focused feature is ever introduced, payment processing and parental verification must be handled through a suitable provider and described in the applicable notice.

o   Information Collected Automatically

A future child-focused feature may automatically record technical information such as an IP address, device or browser information, operating system, identifiers, access dates and usage statistics. The exact data and providers must be verified before publication. Technical identifiers may be treated differently depending on the jurisdiction and the ability to link them with a person, account, household or device. A provider may also combine information collected through the application with information from other services under its own terms. Confirm whether such combination is permitted, whether it is necessary and whether parents or guardians receive a meaningful choice.

·      How We Use Your Information

Information from a future child-focused feature would be used only for the purposes stated in its dedicated notice, such as providing the feature, protecting users, measuring performance and maintaining the service.

o   operate the requested child-focused feature;

o   apply age, parental control or content settings;

o   maintain security and prevent abuse; and

o   provide service notices required for the feature.

Any analytics, conversion tracking, frequency tracking, attribution or advertising activity connected with a child-focused feature must be separately reviewed and should not be included by assumption.

·      Child Focused Third Party Service Providers

A child-focused feature should identify every provider that receives technical or personal information, the provider’s role, the information collected, the retention period and available parental choices. The operator should maintain a current provider list rather than relying on an old privacy notice. It should record the provider’s legal name, service function, categories of information, international transfer position, retention setting, deletion process, security contact and link to the provider’s current policy. If a provider changes its product or begins using information for its own purposes, the Website’s notice and any contractual arrangements should be reviewed.

o   Google Analytics Services

Do not state that Google Analytics for Firebase or another mobile analytics service is used unless East Africa Legal Insight operates an application using it. If that changes, this paragraph must be rewritten from the provider’s current documentation.


  • https://firebase.google.com/policies/analytics/
  • https://support.google.com/analytics/answer/6004245?hl=en
  • https://policies.google.com/technologies/partner-sites
  • https://firebase.google.com/terms/


Google Ads conversion tracking

Provider location, transfer safeguards and opt out instructions must be checked against the current provider documentation and the actual application configuration before publication.

o   Social Media Advertising Conversion Tracking

Do not describe a social-media pixel or conversion-tracking service unless it is actually installed and its use has been reviewed.

Security of Your Information

We use reasonable and proportionate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Measures may include access controls, secure account practices, encryption in transit where supported, platform security features, anti-abuse controls, software updates and limiting access on a need-to-know basis. We rely in part on hosting and service providers, including Blogger and Google services, whose own security practices also apply to information they process. No electronic transmission, website or storage system can be guaranteed to be completely secure.

Data Storage and Retention

Personal information may be stored by East Africa Legal Insight or by service providers supporting the Website, including hosting, email, analytics, advertising, translation and security providers. We retain information only for as long as reasonably necessary for the purpose collected, legal and record-keeping requirements, security, editorial review, dispute management and the establishment or defence of claims. The exact storage locations and retention periods are provider-controlled or operational details that should be confirmed before publication.

Routine correspondence may be deleted or anonymised after the matter is closed, but a longer period may be justified for an active correction dispute, legal claim, security investigation, consent record, suppression request or accounting record. Provider-controlled logs, analytics reports, advertising records, backups and email suppression records may follow different periods. The operator should not promise a fixed period unless it can apply that period in practice.

Consent to Processing and Transfer of Information About You

East Africa Legal Insight is operated from Kigali, Rwanda. Information collected through the Website may be processed in Rwanda and in other countries where service providers operate, including countries outside your place of residence. Those countries may have different data-protection rules. Where Rwanda’s data-protection law or another applicable law regulates an international transfer, we will use a lawful transfer condition and appropriate safeguards required in the circumstances.

If you are in the European Economic Area, the United Kingdom, Switzerland or another jurisdiction with transfer rules, we will apply the lawful basis and safeguards required by the privacy law applicable to the relevant processing. Where consent is the basis for a particular activity, you may withdraw it as described in this Policy, without affecting processing that was lawful before withdrawal.

European Data Subject Rights

The EU GDPR, UK GDPR, Swiss data-protection law and other privacy laws may provide rights to access, correct, delete, restrict or object to processing, receive a copy of information, withdraw consent and complain to a supervisory authority. Whether a right applies depends on the law, the person’s location, the Website’s activities and the statutory thresholds or exemptions involved.

To ask whether East Africa Legal Insight processes your personal information or to request access to it, contact [email protected]. We may need to verify your identity and authority before responding. We will respond within the period required by applicable law, subject to lawful extensions and exemptions.

European Representative and Data Protection Officer

The Website pages reviewed identify East Africa Legal Insight as operating from Rwanda but do not establish that it has appointed a European representative or a formal data protection officer. Do not describe either appointment unless it has actually been made and the appointment is required or chosen under applicable law.

Copyright

Unless otherwise stated, original articles, research notes, commentary, structure, design elements, graphics and compilations published on the Website are owned by or licensed to East Africa Legal Insight. Third-party materials, including legislation, judgments, institutional names, logos, quotations and external resources, remain subject to the rights of their respective owners. Reproduction, republication or commercial use of substantial Website content requires permission unless permitted by applicable copyright law or an applicable licence. Further information may be provided in the Website’s Terms of Usage or another copyright notice.

Business Transfers

If East Africa Legal Insight or substantially all of its assets is reorganised, transferred or acquired, personal information may be transferred as part of that transaction, subject to applicable law and the commitments in this Privacy Policy. We will provide any notice required by law and will take reasonable steps to ensure that the recipient handles the information consistently with the applicable privacy commitments.

Acceptance of Privacy Policy Terms and Conditions

By using the Website, you acknowledge the terms of this Privacy Policy. If you do not agree with the processing described here, you should stop using the relevant Website feature and contact us about any available choices. We may update, modify or remove parts of this Policy to reflect changes in the Website, providers, security practices or law. The current version will show the date on which it was last updated. Where a material change requires additional notice or consent, we will provide it as required by law.

Questions Comments or Complaints

For privacy questions, complaints, data-rights requests, cookie questions or concerns about this Privacy Policy, contact East Africa Legal Insight at [email protected]. You may also use the Website’s Contact page. If you remain dissatisfied about rights under Rwanda’s data-protection law, information about the Data Protection and Privacy Office is available at https://dpo.gov.rw. Please do not send confidential, privileged or urgent legal information through ordinary email unless a formal professional relationship and a secure method have been agreed.