Home / Privacy
Privacy notice
How Riskill Consulting Limited handles personal data submitted through this website, consistent with the Kenya Data Protection Act, 2019.
Last updated: October 2026
How Riskill Consulting Limited handles personal data submitted through this website, consistent with the Kenya Data Protection Act, 2019.
Last updated: October 2026
Riskill Consulting Limited ("Riskill", "we") is a compliance and risk advisory firm incorporated in Kenya. This notice covers personal data you provide through riskilled.com. Personal data handled during a client engagement is governed separately by the engagement letter and any non-disclosure agreement.
When you use the enquiry form we collect the details you submit: your name, work email, institution, role, the enquiry you describe, and any preferred engagement model or timeline. If you subscribe to Riskill Insights, we collect your email address and, if you give it, your name. Our web host also keeps standard server logs (for example IP address and request time) for security and reliability.
We use your details only to respond to and manage your enquiry and any engagement that follows. Our lawful basis is your consent when you submit the form, and our legitimate interest in responding to business enquiries. You may withdraw consent at any time. For the Riskill Insights newsletter, our lawful basis is your consent, which you confirm through the link in the confirmation email we send when you sign up.
This website, including the Insights blog, sets no marketing cookies and uses no third-party advertising or analytics trackers. The newsletter signup form is loaded from our newsletter provider, EmailOctopus, and loads a font from Google Fonts; Google receives your IP address to deliver the font but no cookies are set.
Enquiry submissions are transmitted through our form-delivery processor, Formspree, which forwards them to us by email. Newsletter subscriptions are held by our newsletter provider, EmailOctopus, which sends Riskill Insights on our behalf. We do not sell your data or share it for marketing. Processors act on our instructions under their own data-protection terms.
Our form processor, newsletter provider and email may process data on servers outside Kenya. Where that occurs, transfers are handled under appropriate safeguards consistent with the Kenya Data Protection Act, 2019.
We use your email address only to send Riskill Insights and related notices about new guides. Every email carries an unsubscribe link, and unsubscribing takes effect immediately. When you unsubscribe, we stop all mailings to you; our provider keeps a record that the address has unsubscribed so it is not emailed again. To have that record deleted as well, email us.
We retain enquiry data only as long as needed to handle your enquiry and any resulting engagement, and then delete it, unless a longer period is required by law or professional obligation.
Under the Kenya Data Protection Act, 2019 you may request access to your data, correction, deletion, restriction, or objection, and you may withdraw consent. To exercise any right, email advisory@riskilled.com. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (Kenya).
Riskill Consulting Limited · Nairobi, Kenya · advisory@riskilled.com