Home · Privacy policy
Last updated: 19 October 2026
This policy explains what Data Protection Digest collects from readers and subscribers, who is responsible for that data, and how to exercise your rights over it. It covers this website and the Digest email.
The website itself collects nothing. The pages are static: there are no cookies, no analytics scripts, no tracking pixels and no third-party embeds on any page. Our hosting provider processes server logs, including IP address and user agent, for as long as it takes to serve the page and to prevent abuse. This happens at the hosting layer for any website and is not specific to the Digest.
When you subscribe, your email address is collected and held by Beehiiv Inc., our email service provider, acting as our processor under its own privacy policy. Beehiiv gives us your email address and standard delivery statistics, such as opens and clicks; we use these to send you the Digest and to see whether it is being read, and for nothing else. We also record where you subscribed from: the page, or the invitation email and the organisation we wrote to, if that is how you reached us. We use this only to see which invitations work. We do not sell, rent or share subscriber data with any other party. Every issue includes a one-click unsubscribe link, and unsubscribing removes you from the active list immediately. We keep delivery statistics for as long as your subscription is active, and delete them along with your address when you unsubscribe.
Beehiiv is a US company, so subscribing means your email address is processed outside Kenya and outside most subscribers' home jurisdictions. We rely on Beehiiv's own contractual data-protection commitments as the safeguard for that transfer. If this matters to you and you would rather not have your address leave your jurisdiction, do not subscribe; the website itself, as above, collects nothing.
The controller is Law Lab Africa LLC, a US-incorporated company and the publisher of this site. Contact: info@lawlab.africa.
You can ask us at any time what we hold about you (for subscribers, this is your email address and delivery history), ask us to correct it, or ask us to delete it. Write to info@lawlab.africa and we will answer within 14 days.
If you are in Kenya, the Data Protection Act 2019 applies to our processing of your personal data, and you may complain to the Office of the Data Protection Commissioner (odpc.go.ke) if you are not satisfied with our response. Subscribers elsewhere have the rights their own local law provides, and we honour deletion and access requests regardless of where a request comes from.