Privacy policy

What we collect, and why

Three kinds of thing. Who you are, so a matter has a client: your name, how to reach you, and the identifiers a route needs, for example an ID or a passport number. The documents you hold, because that is what makes a route shorter. And what happened on a matter, because a record that can be trusted has to say who did what and when.

We ask for a document when a route needs it, not in case it is useful later. If a step does not require it, we do not want it.

Who sees it

The people on your matter. That is you, anyone you have added, and the firm or practitioner working it with you. If a firm brought you here, they see the matter they are running; they do not see your other matters.

Our own staff see a matter when they are working on it or when you ask us to look. Beyond that: the offices you are applying to, because that is the point, and the suppliers who host and secure the platform. We do not sell anything about you, and we do not use your documents to train anything.

The suppliers who process this data on our behalf, and the countries they operate from, are not yet named here.

Where documents are stored

Documents are held encrypted, and access to them is logged on the same record as everything else, so you can see who opened what.

We have not yet committed to a hosting region, so this policy does not promise one.

How long we keep it

A matter and its record are kept while the matter is live, and afterwards for as long as the professional obligations on the practitioners require. Documents you uploaded can be removed sooner, on request, unless keeping one is part of the same obligation. When we cannot delete something yet, we will tell you why and when we can.

Retention periods for each kind of document are not yet set.

Getting your data out, or deleted

Your dossier is yours. You can export it, and you can take it with you if you stop working with us or with the firm that brought you here. You can ask us to correct something, and you can ask us to delete what we are not required to keep.

Ask through the contact route on the site and a person will handle it. We will confirm what we did, and the request itself lands on the record.

We have not yet committed to a time limit for answering these requests.

Cookies, and how this site is measured

The platform sets what it needs to keep you signed in. This marketing site sets nothing at all until you have said it may.

We would like to measure visits here with Google Analytics: which pages you open, how far down them you read, which links you press, how long you stay, and the country, device and referring site the visit arrived from. Measuring is not needed to run the site or to answer you, so it has no basis other than your consent. It is off until you allow it, and it stops when you refuse. Refusing changes nothing about how the site works or how we reply to you.

What never leaves your browser: your name, your email address, your phone number, and the words of anything you type into the contact form. When the form is used we record that it was started, that it was sent, which of the two paths it was sent on, and whether it succeeded or failed. None of that carries a word you wrote.

The measurements go to Google, who handle them on our instructions and who may store and process them outside Kenya. With analytics allowed, Google sets cookies in your browser so a returning visit can be recognised as the same visit. With analytics refused, no cookie is set, no identifier is stored, and Google receives only the fact that a page was opened. We do not run advertising here and the advertising features of the product stay switched off for everybody.

Change your mind at any time, from Cookies and analytics at the bottom of every page. Your choice is kept in your own browser rather than on our servers, which is also why clearing your browser data means we ask again.

The full list of cookies, and the retention period set on the analytics property, are not published here yet.

Governing law, and who to write to

Kenyan law governs this policy, and the Data Protection Act 2019 is the framework we work under. If something here is wrong or unclear, tell us before you tell anybody else and we will fix it.

Write to info@fullstanding.com, or to Room 507, 2129 Office Suites, Muthithi Road, Westlands, Nairobi.

The registered entity behind this policy is not yet named.

Changes to this policy

When this policy changes, the date at the top changes with it, and we keep the previous versions. A change that affects what we collect or who sees it gets told to you directly, not left here to be discovered.