Privacy Policy

Last updated: 25 August 2026

This Privacy Policy explains how Pamoja Therapy handles personal data collected through this website, pamoja-therapy.com. It is written in line with the Kenya Data Protection Act, 2019 and the Regulations made under it.

This policy covers the website only. How your information is handled once you get in touch and begin working together as a client is explained to you separately by Pamoja Therapy directly.

Who is responsible for your data

Pamoja Therapy is a sole practice operated by Lys van der Zeeuw, based in Nairobi, Kenya. For the purposes of the Data Protection Act, Lys van der Zeeuw is the data controller for personal data collected through this website.

You can reach us at:

What data we collect through this website

This website does not have a contact form and does not ask you to create an account. The personal data involved is limited to the following.

Analytics data. With your consent, we use Google Analytics (GA4) to understand how visitors use the site. This may include your IP address, device and browser type, the pages you view, how you interact with them, and an approximate location. This information helps us improve the website. The legal basis is your consent, which you give through the cookie banner and can withdraw at any time.

Technical and security data. Our hosting provider records standard server information such as your IP address, browser type and the time of your visit. This is used to keep the website running, secure and available. The legal basis is our legitimate interest in operating a safe and functioning website.

Information you choose to share. If you contact us by email or WhatsApp, we receive the details you send us, such as your name, contact information and the content of your message. We use this only to respond to you. These channels run on third party services (Google for email and WhatsApp for messaging), each with its own privacy terms.

Cookies

We use a limited number of cookies and similar technologies, managed through a consent banner:

  • Functional cookies, which remember your cookie choices and allow the site to work properly. These are always active and do not require consent.
  • Statistics cookies, placed by Google Analytics after you give consent, as described above.

We do not currently use advertising or marketing cookies. When you first visit the site you can accept or decline non essential cookies, and you can change your choice at any time through the consent settings on the site or through your browser.

Who we share data with

We do not sell your personal data. We use a small number of trusted service providers who process data on our behalf:

  • Google, for website analytics (Google Analytics) and email.
  • Hostinger, for website hosting.

We only share what is necessary for these services to function.

Transfers outside Kenya

Some of our providers process data on servers located outside Kenya. Google processes data in the United States, and our hosting provider may store data on servers outside Kenya. Where personal data is transferred outside Kenya, it is protected by the safeguards those providers apply, such as standard contractual clauses, consistent with the transfer requirements of the Data Protection Act.

How long we keep your data

  • Analytics data is retained for the period set in Google Analytics (by default up to 14 months).
  • Messages you send us are kept only as long as needed to respond to your enquiry.
  • Server logs are kept for a short period for security and maintenance.

Your rights

Under the Kenya Data Protection Act, 2019 you have the right to:

  • be informed of how your personal data is used;
  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted in certain circumstances;
  • object to or ask us to restrict processing;
  • request a copy of data you provided, where processing is based on consent;
  • withdraw your consent at any time.

To exercise any of these rights, email us at lys.pamoja@gmail.com. We may ask you to confirm your identity, and we aim to respond within a reasonable time.

Children

This website is intended for parents, guardians and other adults seeking support for children and families. It is not directed at children, and we do not knowingly collect personal data from children through the site.

Automated decision making

We do not use your personal data for automated decision making or profiling.

Security

This website uses a secure connection (HTTPS). We take reasonable measures to protect personal data against loss, misuse and unauthorised access.

Complaints

If you have a concern about how your personal data is handled, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Britam Towers, Upperhill, Nairobi, through www.odpc.go.ke.

Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.