Privacy policy
This policy explains what this site and its jurisdiction-alerts service collect, who is responsible for that data, and how to exercise your rights over it. Last updated 23 October 2026.
Who we are
This site is operated by Law Lab Africa LLC, a US-incorporated company; contact info@lawlab.africa. Where we process personal data of people in Kenya, Kenya's Data Protection Act 2019 applies alongside any other applicable law, and we hold ourselves to it.
What this site collects
Nothing, by default. The site is static: no accounts, no cookies, no analytics scripts, no trackers, no server-side code.
If you subscribe to jurisdiction alerts
When you sign up for enforcement alerts we collect your email address and the jurisdictions you choose. That is the whole list. We store them in an access-restricted database hosted by Supabase Inc. (our processor for this service), encrypted at rest. We use them for exactly one purpose: sending you the alerts you asked for.
Nothing is sent until you confirm your address (we email you a confirmation link first). Every alert carries an unsubscribe link; one click stops all alerts. Thirty days after you unsubscribe we delete your record entirely, keeping only a one-way hash of the address so we never mail you again by mistake. Unconfirmed signups are deleted after 7 days.
If you upgrade to paid alerts, payment is handled by Stripe (or Paystack for KES/M-Pesa); we never see or store card numbers. We keep a payment reference so we know your tier.
You can ask us at any time what we hold about you, ask us to correct it, or ask us to delete it: info@lawlab.africa. You can also complain to the Office of the Data Protection Commissioner (Kenya) or your local authority. Controller: Law Lab Africa LLC.
If you email us
We keep correspondence for as long as needed to deal with it and for our records. Correction reports may be kept permanently as part of the tracker's provenance, with personal details removed on request.
People named in tracker records
Tracker records summarise public regulatory documents, and parties are named as they appear in the regulator's published documents. Where the regulator anonymises a party, so do we. If a record about you is inaccurate, or you wish to raise your naming in a record, email us with the record ID; the correction policy is on the methodology page.
Your rights
Depending on where you are, you may have rights of access, rectification, erasure, restriction, portability and objection. Write to info@lawlab.africa. If you are in Kenya and are unsatisfied with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).