Last updated: 7 October 2026
MSM Chris & Associates (“MSM Chris”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, protect and retain personal information when you visit our website, communicate with us, engage our professional services, apply for an opportunity with us, or otherwise interact with MSM Chris.
We process personal information in accordance with applicable laws of Kenya, including the Data Protection Act, 2019 and applicable regulations and guidance issued under it.
1. Information We Collect
Depending on how you interact with us, we may collect the following information:
Information you provide to us. This may include:
- Your name and contact details
- Email address and telephone number
- Company or organisation details
- Information provided when requesting a quotation or our professional services
- Information submitted through contact forms or other correspondence
- Information provided when applying for employment, internships or other opportunities
- Information contained in documents and records provided to us in connection with a professional engagement
Information collected automatically. When you visit our website, certain technical and usage information may be collected automatically, including:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on our website
- Referring website or source
- Other technical information relating to your interaction with our website
2. How We Use Personal Information
We may use personal information to:
- Respond to enquiries and requests
- Provide audit, assurance, tax, advisory and other professional services
- Prepare proposals, quotations and engagement documentation
- Manage our relationship with clients and professional contacts
- Communicate with clients and prospective clients
- Process employment and internship applications
- Operate, maintain and improve our website
- Monitor website usage and performance
- Maintain professional, accounting and administrative records
- Maintain the security of our systems and website
- Prevent fraud, misuse or unauthorised access
- Comply with legal, regulatory and professional obligations
- Establish, exercise or defend our legal rights
3. Legal Basis for Processing
We process personal information on lawful grounds recognised under applicable Kenyan data protection law, including where:
- You have provided consent
- Processing is necessary to perform a contract or take steps at your request before entering into a contract
- Processing is necessary to comply with a legal or regulatory obligation
- Processing is necessary for our legitimate professional or business interests
- Another lawful basis permits us to process the information
Where processing is based on consent, you may withdraw that consent where permitted by law. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
4. Client and Engagement Information
As an audit, tax and advisory firm, MSM Chris may receive personal, financial, commercial and other confidential information relating to our clients and their stakeholders in the course of providing professional services.
Such information is used only for legitimate professional, contractual, legal and administrative purposes connected with the relevant engagement or our professional responsibilities.
We maintain appropriate confidentiality arrangements and restrict access to client information to authorised personnel who require it for legitimate business or professional purposes.
The handling of client information is also subject to the terms of the applicable engagement letter and our professional and legal obligations.
5. Disclosure of Personal Information
MSM Chris does not sell or rent personal information.
We may disclose personal information where reasonably necessary and lawful, including:
- To authorised partners, employees and personnel of MSM Chris
- Where disclosure is necessary to provide a professional service
- Where required by law, regulation, court order or a competent authority
- To professional advisers where reasonably necessary
- Where you have authorised the disclosure
- Where disclosure is necessary to establish, exercise or defend legal rights
We do not routinely share client or website-user personal information with international organisations or partners.
6. Data Security
MSM Chris takes the security and confidentiality of personal information seriously.
Our core business and client data is hosted on MSM Chris-controlled secured servers. We maintain technical and organisational safeguards designed to protect information against unauthorised access, loss, misuse, alteration, disclosure or destruction.
These measures include, where applicable:
- Access controls and user authentication
- Restricted access to confidential information
- Secure server infrastructure
- Data backup procedures
- Security monitoring and controls
- Confidentiality obligations for personnel
- Internal procedures for managing information-security incidents
Access to information is granted only to authorised personnel based on legitimate business or professional requirements.
While we take reasonable measures to protect information, no electronic system or method of transmission can be guaranteed to be completely secure.
7. Website Analytics and Cookies
Our website uses Google Analytics to help us understand how visitors use our website and to improve its performance and content.
Google Analytics may collect information such as:
- Pages visited
- Approximate geographic location
- Device and browser information
- How visitors arrived at our website
- Time spent on pages
- General website usage patterns
Google Analytics uses cookies and similar technologies to collect this information.
We use Google Analytics for website analysis and performance monitoring. We do not use Google Analytics to intentionally collect information such as passwords, financial information or confidential client engagement information.
You can control or disable cookies through your browser settings. You may also use available browser or Google tools to limit certain analytics activity.
Our website may contain other cookies that are necessary for website functionality, security or performance.
8. Retention of Personal Information
We retain personal information for as long as reasonably necessary for the purposes for which it was collected and to meet our legal, regulatory, professional and business obligations.
The appropriate retention period depends on the nature of the information and the circumstances in which it was collected.
Certain client and professional records may need to be retained for periods prescribed by applicable legislation, professional requirements or our internal record-retention policies.
9. Your Data Protection Rights
Subject to applicable law, you may have the right to:
- Be informed about how your personal information is being processed
- Request access to personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of personal information in circumstances permitted by law
- Object to certain processing activities
- Request restriction of processing in applicable circumstances
- Withdraw consent where processing is based on consent
- Exercise other rights provided under applicable data protection legislation
Some rights may be subject to legal, regulatory, contractual or professional limitations.
10. Third-Party Websites
Our website may contain links to third-party websites, including professional organisations, government institutions and social media platforms.
MSM Chris is not responsible for the privacy practices, content or security of third-party websites. We encourage you to review the privacy policies of those websites before providing them with personal information.
11. Communications
If you contact us by email, telephone, website form or another communication channel, we may retain your communication and contact details for the purpose of responding to your enquiry and maintaining appropriate business records.
Where permitted by law, we may also send information relating to our services, publications or professional updates.
You may request to stop receiving non-essential promotional communications from us.
12. Employment and Internship Applications
Where you submit an application for employment, internship or another opportunity with MSM Chris, we may process the information you provide for recruitment, assessment, verification and related administrative purposes.
Application information will be retained for an appropriate period in accordance with applicable legal and organisational requirements.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data protection practices.
Any updated version will be published on this page with the revised “Last updated” date.
14. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we process personal information, please contact us:
Email: legal@msmchris.co.ke
When making a data protection request, we may ask for sufficient information to verify your identity and process your request appropriately.
15. Complaints
If you have concerns about our handling of your personal information, we encourage you to contact us first so that we can investigate and address the matter.
You may also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya in accordance with applicable law.
MSM Chris & Associates
Certified Public Accountants