PRIVACY AND CONFIDENTIALITY
CONFIDENTIALITY AND PRIVACY
Last updated: 25 August 2026
About This Notice
This notice explains how East African Solutions Ltd collects, uses, stores and protects confidential information and personal data.
It applies when you:
Visit this website;
Submit an enquiry;
Subscribe to East African Solutions insights and updates;
Communicate or work with us;
Attend a meeting or event involving us; or
Otherwise provide information to East African Solutions.
For the purposes of UK data-protection law, the principal controller of personal data collected through this website is:
East African Solutions Ltd
International House
36–38 Cornhill
City of London
London EC3V 3NG
United Kingdom
Company number: 13104253
Email: info@eastafricansolutions.com
East African Solutions Ltd is registered with the UK Information Commissioner’s Office.
References to “East African Solutions,” “EAS,” “we,” “us” or “our” in this notice generally refer to East African Solutions Ltd. Where information is shared with an affiliated EAS entity, representative or authorised person in another country, that sharing is governed by the principles described below.
Confidentiality
Information entrusted to East African Solutions during a professional engagement is treated as confidential and handled in accordance with our contractual, legal and professional obligations.
Access is limited to people who require the information for an authorised purpose. Where appropriate, we enter into confidentiality, non-disclosure or non-circumvention agreements with clients, consultants and other parties involved in an engagement.
We may disclose confidential information where:
The person or organisation that provided it has authorised the disclosure;
Disclosure is reasonably necessary to deliver an agreed engagement;
A professional adviser, consultant or service provider requires access and is subject to appropriate confidentiality obligations;
Disclosure is required by law, regulation, court order or a competent authority; or
Disclosure is necessary to establish, exercise or defend legal rights.
This webpage does not, by itself, create a contractual duty of confidentiality or replace the terms of a separate confidentiality or engagement agreement.
Personal Data We May Collect
The personal data we collect depends upon how you interact with us. It may include:
Your name, job title and organisation;
Your email address, telephone number and other contact details;
Your country, market or location;
Information included in an enquiry, proposal, application or correspondence;
Information about a business, asset, opportunity, project or strategic decision you ask us to consider;
Records of meetings, communications and professional interactions;
Information required to establish, administer or deliver a client or supplier relationship;
Billing, payment and transaction records;
Newsletter subscription choices and communication preferences;
Information about how you interact with emails we send;
Website usage information, including IP address, browser, device and pages visited; and
Information obtained from publicly available professional sources, referrals or business contacts.
We do not ask you to provide special-category personal data through the website. Please do not include sensitive personal, medical, financial-account, identification or other unnecessary confidential information in the enquiry form.
If sensitive information is relevant to a professional engagement, appropriate arrangements should be agreed before it is supplied.
How We Obtain Personal Data
We may receive personal data:
Directly from you;
From an organisation you represent;
Through our website, forms and email communications;
During meetings, events or professional engagements;
From clients, professional advisers, business partners or referrals;
From publicly accessible professional and corporate sources; and
Automatically through website technologies, where permitted.
How and Why We Use Personal Data
We use personal data only where we have a lawful basis for doing so.
Enquiries and potential engagements
We use information submitted through the website or provided in correspondence to:
Understand what you are considering;
Respond to your enquiry;
Assess whether an initial conversation or professional engagement may be appropriate;
Prepare proposals or engagement terms; and
Maintain records of our communications.
Our lawful bases are taking steps at your request before entering into a contract and our legitimate interests in considering and responding to potential business relationships.
Client and supplier relationships
Where we work with you or your organisation, we may use personal data to:
Establish and administer the relationship;
Deliver agreed services;
Communicate with relevant personnel and stakeholders;
Coordinate authorised consultants, advisers and service providers;
Maintain financial and operational records;
Protect confidential information; and
Establish, exercise or defend legal rights.
Our lawful bases may include performance of a contract, compliance with legal obligations and our legitimate interests in administering and protecting our business and professional engagements.
Legal, regulatory and security purposes
We may use personal data to:
Comply with applicable laws, regulations and professional obligations;
Prevent or investigate fraud, misuse, security incidents or unlawful activity;
Respond to lawful requests from courts, regulators or public authorities;
Maintain appropriate business, accounting and tax records; and
Protect the rights, property and security of EAS and others.
Our lawful bases are compliance with legal obligations and our legitimate interests in protecting our operations and legal rights.
Business development and professional communications
We may use professional contact information to develop and maintain relevant business relationships, including where information has been supplied through a referral or obtained from a publicly accessible professional source.
Where consent is required before sending electronic marketing, we will seek that consent. In other circumstances, we may rely on legitimate interests where our use is proportionate, relevant to the recipient’s professional role and consistent with applicable direct-marketing rules.
You may object to the use of your personal data for direct marketing at any time.
Email Insights and Updates
If you choose to subscribe, East African Solutions will use your name, email address and subscription record to send you insights, publications, company updates and information about our services.
Our lawful basis for this processing is your consent.
Subscribing is optional and is not required to:
Submit an enquiry;
Receive a response to an enquiry; or
Work with East African Solutions.
Where subscriber verification is enabled, you will not be added to the subscriber list until you confirm your subscription through the verification email.
You may withdraw your consent at any time by:
Using the unsubscribe link contained in any marketing email; or
Emailing info@eastafricansolutions.com.
Withdrawing consent will not affect the lawfulness of processing undertaken before consent was withdrawn.
After an unsubscribe request, we may retain the minimum information necessary on a suppression list to ensure that the address is not inadvertently used for future marketing.
We do not add ordinary form submitters to our marketing list unless they have selected the separate subscription option or another valid basis permits the communication.
Email Measurement
Emails distributed through our email-campaign provider may contain technologies that record delivery, opening and link activity. We use this information to understand the overall performance and relevance of our communications.
Where this information can be associated with an individual subscriber, it is handled as personal data. You can stop further marketing-related measurement by unsubscribing from EAS insights and updates.
Cookies and Website Technologies
Cookies and similar technologies are small files or identifiers used to operate websites, remember preferences, protect forms, understand website performance and support embedded or connected services.
This website may use:
Strictly necessary technologies, required for security, navigation, form submission, subscriber verification and other essential website functions;
Functional technologies, used to remember choices and support website features;
Analytics technologies, used to understand aggregated website usage and improve the website; and
Embedded-service technologies, which may be activated when content or features supplied by another provider are used.
Where consent is legally required, non-essential technologies are not used until you make a choice through the website’s cookie controls.
You can accept, reject or manage non-essential cookies through the cookie banner or preference controls made available on the website. You can also restrict or delete cookies through your browser, although doing so may affect some website functions.
A privacy policy alone does not constitute consent to non-essential cookies.
Website and Communications Providers
The EAS website, contact forms, subscriber records and email-campaign functions are operated using Squarespace.
Squarespace and its authorised subprocessors may process:
Website and account information;
Form submissions;
Subscriber details;
Email-delivery and engagement information;
Device and usage information; and
Information required for security and service delivery.
We may also use:
Business email and document-storage providers;
Website analytics and security providers;
Professional advisers;
Consultants and contractors;
Payment, accounting and administrative providers; and
Other services reasonably necessary to operate EAS or deliver an engagement.
Where another provider processes personal data for us, we take proportionate steps to ensure that appropriate contractual, confidentiality and security arrangements apply.
When We May Share Personal Data
We may share personal data with:
Squarespace and other technology providers that operate the website, forms, communications and business systems;
Professional advisers, consultants and contractors who require access for an authorised purpose;
Affiliated EAS entities, representatives or personnel where access is necessary for an enquiry or engagement;
Clients, counterparties or project participants where the disclosure has been authorised or is reasonably required for an agreed purpose;
Banks, insurers, auditors, accountants and legal advisers;
Courts, regulators, law-enforcement bodies and other competent authorities where disclosure is required or permitted by law; and
A purchaser, investor or successor if EAS undergoes a merger, reorganisation, financing or transfer of all or part of its business.
We do not sell personal data.
We do not disclose personal data to another organisation for that organisation’s unrelated marketing unless you have expressly authorised us to do so.
International Processing and Transfers
Some of our service providers, affiliated entities, consultants or authorised personnel may be located outside the United Kingdom. Personal data may therefore be stored, accessed or processed in other countries, including the United States and countries within Africa.
Squarespace states that its data infrastructure is located in the United States and that it uses recognised international-transfer mechanisms, including the UK Extension to the EU–US Data Privacy Framework and contractual transfer safeguards where applicable.
When personal data is transferred internationally, we seek to ensure that the transfer is covered by:
UK adequacy regulations;
An approved data-privacy framework;
The UK International Data Transfer Agreement;
The UK Addendum to approved Standard Contractual Clauses;
Another legally recognised safeguard; or
A lawful exception where appropriate.
You may contact us at info@eastafricansolutions.com if you would like further information about the safeguards relevant to a particular transfer.
Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, regulatory, accounting, security and dispute-resolution requirements.
As a general guide:
Enquiry and preliminary-engagement records may be retained for up to 24 months after the last meaningful communication, unless a longer period is justified;
Client, supplier, contractual, accounting and transaction records may ordinarily be retained for up to six years after the relevant relationship or transaction ends;
Subscriber information is retained until consent is withdrawn, the subscription is otherwise ended or the list is reviewed and the information is no longer required;
Minimal suppression information may be retained after an unsubscribe request to prevent further marketing; and
Information relevant to a dispute, investigation or legal claim may be retained for as long as reasonably necessary to resolve or protect against that matter.
We may retain anonymised information that no longer identifies an individual.
Security
We use proportionate technical, organisational and contractual measures designed to protect personal data against:
Unauthorised access;
Accidental loss;
Misuse;
Alteration;
Improper disclosure; and
Destruction.
Access is restricted according to business need, and people handling confidential or personal information are expected to observe appropriate confidentiality and security obligations.
No method of electronic storage or internet transmission is completely secure. We cannot guarantee absolute security, but we take reasonable steps to identify and manage foreseeable risks.
Your Rights
Depending upon the circumstances, UK data-protection law may give you the right to:
Be informed about how your personal data is used;
Request access to personal data held about you;
Request correction of inaccurate or incomplete information;
Request erasure of personal data;
Request restriction of processing;
Object to processing based upon legitimate interests;
Object at any time to the use of personal data for direct marketing;
Request data portability where applicable;
Withdraw consent at any time where processing is based on consent; and
Complain to the Information Commissioner’s Office.
These rights are not absolute and may be subject to legal limitations.
To exercise a right, contact:
We may need to verify your identity before acting upon a request. We will normally respond within the period required by applicable law.
Your right to object to direct marketing
You have an absolute right to object to the use of your personal data for direct marketing. If you object or unsubscribe, we will stop using your personal data for that purpose.
Complaints
If you have concerns about how we use personal data, please contact us first at:
You also have the right to complain to the UK Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
If another country’s data-protection law applies to the relevant processing, you may also have the right to contact the competent authority in that jurisdiction.
Information Concerning Other People
If you provide personal data concerning another person, you should ensure that:
You are authorised to provide it;
The disclosure is lawful;
The information is relevant and accurate; and
The person has received any privacy information that must be provided to them.
Children
This website and our services are intended for businesses, investors, institutions and professional users. They are not directed towards children, and we do not knowingly seek to collect personal data from children through the website.
External Links and Services
The website may link to or display content from third-party websites and services. Those organisations operate under their own terms and privacy policies.
Once you leave the EAS website or interact with an independently operated service, EAS does not control how that third party processes information. You should review the applicable privacy information before providing personal data.
Automated Decision-Making
We do not use information collected through the website to make solely automated decisions that produce legal or similarly significant effects concerning individuals.
Changes to This Notice
We may update this notice to reflect changes in our activities, technology, service providers or legal obligations.
The current version will be published on this page with its effective date. Where a change materially affects how we use subscriber or client personal data, we will take reasonable steps to communicate it where appropriate.
Contact
For privacy questions, requests or concerns, contact:
East African Solutions Ltd
International House
36–38 Cornhill
City of London
London EC3V 3NG
United Kingdom