Privacy Policy

Last updated: 8 May 2026

Martial Jenga Labs (“we”, “us”, “our”) operates the Martial LMS platform. This Privacy Policy explains how we collect, use, share and protect personal data when you use the Service. We comply with the Kenya Data Protection Act, 2019 and registered guidance from the Office of the Data Protection Commissioner (ODPC).

1. What we collect

• Account data: name, email, phone, role, firm name, billing address.
• Practice data you upload: matters, clients, hearings, fee-notes, documents and timesheets.
• Usage data: log records, IP address, device and browser metadata, pages viewed.
• Cookies: session, preference and analytics cookies. You can control these in your browser.

2. How we use it

We process personal data to (a) provide and improve the Service; (b) bill subscriptions and meet KRA tax obligations; (c) authenticate users and prevent abuse; (d) communicate with you about your account, security and product updates; and (e) comply with Kenyan legal and regulatory obligations.

3. Lawful basis

We rely on contract performance, legitimate interest, your consent (where required) and legal obligation as the lawful bases for processing under the Data Protection Act, 2019.

4. Sharing

We do not sell personal data. We share data only with vetted processors that help us run the Service (hosting, payments, email delivery, analytics) under written data-processing agreements. We disclose data to public authorities only when legally compelled to do so.

5. International transfers

Where data leaves Kenya, we apply safeguards consistent with section 48 of the Data Protection Act, 2019, including contractual protections with our processors.

6. Retention

We retain personal data while your account is active and for as long as needed to comply with our legal obligations. You can request deletion at any time; some records may be retained for tax and audit purposes as required by Kenyan law.

7. Security

Data is encrypted in transit (TLS) and at rest. Access is role-based and audited. We run regular backups, patch our systems, and operate a documented incident-response plan. No system is perfectly secure, but we take privilege and confidentiality seriously.

8. Your rights

Under the Data Protection Act, 2019 you have the right to access, correct, delete, restrict, object to and port your personal data. To exercise any of these rights, email info@martial.co.ke. We will respond within statutory time-frames.

9. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal data from minors.

10. Cookies

We use essential cookies to keep you signed in and remember preferences, and analytics cookies to understand usage. You can disable non-essential cookies via the cookie banner or your browser settings.

11. Changes

We may update this Privacy Policy from time to time. We will notify you via the Service or email when material changes occur.

12. Contact & complaints

Data Protection Officer:
Martial Jenga Labs · Suite 1616, 16th Floor, Viewpark Towers, Utalii Lane, Nairobi.
info@martial.co.ke · +254 11 304 045

You also have the right to complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.