Privacy Policy

Last updated: 2026

Goldstar East Africa Associates (“Goldstar”, “we”, “us” or “our”) is committed to protecting your privacy. This policy explains how we collect, use, disclose and safeguard your personal data when you visit our website or engage our accounting, tax, audit and advisory services. We process personal data in accordance with the Kenya Data Protection Act, 2019 and the guidance of the Office of the Data Protection Commissioner (ODPC).

Information We Collect

We collect information you provide directly and information gathered automatically when you use our website, including:

• Contact details — your name, email address, telephone number and company name, submitted through our contact form, by email, phone or WhatsApp.
• Engagement information — financial records, KRA PINs, statutory filings and other documents you share so we can deliver our services.
• Technical data — IP address, browser type, device information and pages visited, collected through cookies and analytics.

How We Use It

We use your personal data to respond to enquiries, prepare quotations, deliver and administer our engagements, meet our own legal and statutory obligations (including KRA and ICPAK requirements), and to improve our website and services. We will only use your information for the purposes for which it was collected, unless we reasonably consider another purpose compatible with the original one.

Cookies & Analytics

Our website uses cookies and similar technologies to keep the site secure, remember your preferences and understand how visitors use our pages. You can control or disable cookies through your browser settings, though some features of the site may not function as intended if you do.

Data Sharing

We do not sell your personal data. We may share it only where necessary: with regulatory and tax authorities such as the Kenya Revenue Authority where required by law; with trusted service providers (for example, secure cloud accounting and email platforms) who act on our instructions; or where you have given us your consent. Any third party we engage is bound to handle your data securely and lawfully.

Data Security

We apply appropriate technical and organisational measures — including access controls, encryption in transit and strict confidentiality obligations on our team — to protect your data against unauthorised access, loss or disclosure. We retain personal data only for as long as necessary to fulfil the purposes described in this policy and to meet our legal and statutory retention obligations.

Your Rights under the Kenya Data Protection Act, 2019

As a data subject, you have the right to be informed of how your data is used, to access the personal data we hold about you, to request correction of inaccurate data, to object to or restrict processing, to request deletion where appropriate, and to data portability. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been mishandled. To exercise any of these rights, please contact us using the details below.

Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at infodesk@goldstarassociates.co.ke or write to us at 4th Floor, Annex Plaza, Nairobi, Kenya.