BCCK PRIVACY NOTICE

1. About British Chambers of Commerce Kenya.

  • We, British Business Association of Kenya registration number 9660 / British Chambers of Commerce Kenya a company registered with registration number CPR/2014/156782 (the Chamber, we, us, our). We are a part of a network of the Chambers of Commerce globally affiliated by the United Kingdom British Chambers of Commerce.
  • We are registered with the Office of the Data Protection Commissioner as a Data Controller (Serial No 03488, date 27/11/2023).
  • We honour the rights of our members, employees and other users’ including website visitors’ right to privacy and data protection.
  • Processing of personal data is governed by the Data Protection Act, 2019(‘the Act’), The Data Protection General Regulations 2021, The Data Protection (Registration of Data Controllers and Data Processors) 2021, The Data Protection (Complaints Handling and Enforcement Procedures) Regulations 2021 and as may be amended from time to time, and any other regulations made thereunder (collectively, “the Data Protection Legislation”).
  • This Privacy Notice (“Notice”) describes how we collect, uses, share, and retain Personal Data provided by users of this website. The Policy is effective as of 3rd May 2024.

2. About this Notice

  • In order to provide our Services, we may need to process Personal Data from time to time (that is information about someone who can be identified or is identifiable from the data). This is Personal Data may be about you or other people. This Notice explains how we will use the Personal Data we hold.
  • The Notice will be continuously assessed against new technologies, business practices, regulatory changes and the evolving needs of the Chamber and the membership’s services provided the Chamber. So please do keep an eye on our notice before giving us any Personal Data.

3. Who do we hold Personal Data about.

  • We collect and hold a variety of personal data including names, email addresses, phone numbers, payment information, social media profiles, business addresses, demographic information such and details of our services the users may be interested in such as international trade opportunities, events and training courses.
  • We collect information directly from individuals or from the parent companies of the individuals. The information could be collected through e-mails, phone calls, online registration forms, event registration forms and face to face meetings.
  • We do not process children’s data. In the event we must process the personal data for children we will ensure we have consent from parents or guardians.
  • We do not collect personal data about individuals except when there is a lawful basis or a legitimate business requirement.

Details of the Individuals (Data Subjects):

INDIVIDUALS
TABLE HEADER 2
Client contacts
that is any party which has engaged us to provide services (including key contact data);
Membership
that is any party who or which has signed up to be a member of our organisation (including any individuals in their companies);
Supporters
that is anyone who has contacted us to find out about what we do or otherwise supported us, other than through Membership;
Beneficiaries
that is any individuals who receive our services.

4. How we process the Personal Data we hold, purpose for processing and what is our lawful basis.

  • We hold and process Personal Data as a Controller, which means we must have a ‘lawful basis’ for doing so. We have set out how we use Personal Data along with our lawful basis in the table below.
Purpose/Activity
Type of data
Lawful basis for processing including basis of legitimate interest
o register you as a new member
(a) Identity
(b) Contact
Performance of a contract with you.
To process and deliver your order or when you are purchasing items from our stores including:
(a) Manage payments, fees and charges.
(c) Deliver services to you (we may need to share your details with a third party providing a service, such as event providers and hotels)
(a) Identity
(b) Contact
(c) Financial
(d) Transaction
(e) Marketing and Communications
(a) Performance of a contract with you.
(b) Necessary for our legitimate interests.
To manage our relationship with you which will include:
(a) Notifying you about changes to our terms or privacy policy.
(b) Sending you legally required information relating to information about our services.
(a) Identity
(b) Contact
(c) Profile
(a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate interests (to keep our records updated, to study how customers use our services, to provide you with the best service and to understand how we can improve our service based on your experience)
To enable you to take part in our events or complete a survey and to allow us to administer any of our events.
(a) Identity
(b) Contact
(a) Performance of a contract with you.
(b) Explicit Consent for photos and images (which consent you may withdraw at any time).
For commercial marketing, to make suggestions and recommendations to you about services that may be of interest to you
(a) Identity
(b) Contact
(c) Photos
(d) Images
Explicit Consent (which consent you may withdraw at any time)
  • Anywhere we are relying on legitimate interest we believe that such processing is necessary for the purposes of our legitimate interest, which in this case is to function as a business. We consider such use goes no further than the Data Subject would reasonable expect; is likely to align with the Data Subject’s interests (by enabling us to provide a sustainable business model) and is unlikely to be detrimental to the fundamental rights and freedoms of the Data Subject.
  • We may perform statistical analyses of user behaviour and characteristics to measure interest in and the use of various sections of the website.
  • The personal data held by us may also be used on an aggregate basis without any personal identifiers to provide third parties with information, such as the composition of membership, and to help us develop new member services, improve the features and content of the website or other marketing material, and to provide sponsors and others with aggregate information about our members, website users and their usage patterns in relation to services and/or the website.
  •  

5. Your rights under the Data Protection Legislation.

Under the Data Protection Legislation, you have the following rights, which we will always work to respect and uphold:

 

  • The right to be informed about our collection and use of your personal data. This Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions.
  • The right to access the personal data we hold about you.
  • The right to have your personal data corrected if any of your personal data held by us is false, erroneous or misleading.
  • The right to ask us to delete or otherwise dispose of any of your personal data that we hold.
  • The right to restrict (i.e. prevent) the processing of your personal data.
  • The right to object to us to our use of your personal data for a particular purpose or purposes.
  • The right to withdraw consent. This means that, if we are relying on your consent as the lawful basis for using your personal data, you are free to withdraw that consent at any time.
  • The right to data portability. You have a right to request your personal data, which you have provided to us in a structured and commonly used format for your own use across different services.
  • Rights relating to automated decision-making and profiling. We do not use your personal data in this way.
  •  

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights), such as full name, address, telephone number, email address, member number. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

For more information about our use of your personal data or exercising your rights as outlined above, please contact us by email as set out in Part 9.

It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed as long as we have that data.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Office of the Data Protection Commissioner. We would welcome the opportunity to resolve your concerns ourselves, however, so please contact us first.

 

Time limit to respond.

We try to respond to all legitimate requests within 7 to 30 days. Occasionally it may take us longer than the stipulated time period if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

6. How we share your personal data.

All data sharing will be undertaken in line with the Data Protection Legislation.

Transfer of your personal data outside of the Republic of Kenya.

Subject to one or more appropriate safeguards set out in the Data Protection Legislation, we may from time to time transfer your personal data to the United Kingdom for the purposes described in this Privacy Notice.

When transferring your personal data we will ensure that it is protected in the same way as if it was being processed in the Republic of Kenya. 

We will ensure that the recipient country of your personal data has equivalent data protection laws in place and we will put in place a written contract with the recipient that means they must protect it to the same standards as the Republic of Kenya.

7. Security of your Personal Data

  • We use reasonable measures to safeguard your personal data.
  • We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
  • We limit access to your personal data to only those employees, contractors or agents who have a legitimate business need to have access to that data. The employees, contractors or agents will process your personal data in accordance with our instructions. They will be subject to a duty of confidentiality and due care with respect to handling the personal data.
  • We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
  • Our employees are trained on data security and information protection. Relevant areas of the our website will employ Secure Socket Layer (“SSL”) or Transport Layer Security (“TLS”) encryption technology to enhance data privacy and help prevent loss, misuse, or alteration of the information collected and retained by us.

8. How long do we keep your Personal Data.

We are required under the Data Protection Legislation to keep your personal data only for specific period as lawfully required. Some of the considerations we take into account when deciding on the retention of your data is:

  1. Where it is stipulated under the law; and
  2. the necessary time your data is needed for us to deliver the service to you.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

9. How to Contact us

If you wish to contact us in respect of part of this Privacy Notice or have any questions or would like further information regarding our handling of your personal data, please contact us by email:

Designation: The Office Administrator  

Physical Address:  British Council Complex

Email address: privacy@bcckenya.org

10. Changes to your personal data

 Please keep us informed of any changes to your personal data by emailing us with full details of the changes at membership@bcckenya.org

About David Beer

David Beer has been the CEO of TradeMark Africa (TMA) since 2022. TMA is Africa’s leading aid-for-trade organisation, focused on reducing the cost and time of trading across borders in Africa, and boosting exports. He has led the expansion of TMA to 18 countries across the continent, aiming to close the gap between governments and the private sector in removing trade barriers.

David brings over 20 years of senior international experience in diplomacy, multilaterals, and economic development. Throughout his career, he has served in Uganda, Sudan, Burundi, Malawi, the Democratic Republic of Congo, and Ghana, holding senior leadership positions, designing and managing innovative programmes, and driving diplomatic and influencing strategies.

Prior to joining TradeMark, David served as the UK’s High Commissioner to Malawi, having previously been the UK’s Development Director there, managing up to $100 million of aid programming per year. He was also the UK’s Development Director in Burundi and led Economic Development work in Ghana. Additionally, he has advised UK Executive Directors to the Boards of the World Bank and International Monetary Fund.

David Beer is a graduate of Oxford University.

This will close in 0 seconds

About Guy de Rohan Willner

Guy de Rohan Willner is a highly accomplished technology entrepreneur, investor, and business leader with extensive experience in digital infrastructure, data centres, and high-growth technology ventures across Europe, Africa, and global markets. He is the Chairman and Co-Founder of IXAfrica, where he plays a key role in advancing data centre development and digital ecosystems in Africa. He also serves as Senior Advisor for Digital Infrastructure at Helios LLP and holds board positions at Elea Digital and other international organisations.

Willner previously co-founded IXEurope PLC, where he served as CEO and successfully built the company into a leading European data centre provider, overseeing multiple acquisitions before listing on the London Stock Exchange and ultimately selling the business to Equinix Inc. His earlier leadership role as President Europe at Equinix further strengthened his reputation in the sector.

With a background in engineering from Oxford Brookes University, Willner combines technical expertise with strategic vision. He brings decades of experience in scaling businesses, investment strategy, and market expansion, making him a respected leader in the global digital infrastructure space.

This will close in 0 seconds

About Karen Basiye

Karen Basiye is a keen Sustainability Thought Leader, practitioner, and Corporate Environment Manager with 15 years of experience. She has worked at the National Environment Management Authority and Safaricom, developing expertise in Leadership, Governance, Strategic Thinking, Sustainability Reporting (Global Reporting Initiative and United Nations Global Compact), Social Policy, Corporate Environmental Management, Environmental Management Systems including ISO certification, Environmental Policies, Environmental Risk Management, Compliance Assessment, Energy and Climate Change Policies, Strategies for Sustainable Development, Integrated Product Policies, Sustainable Consumption and Production, and integration of Sustainable Development Goals into company strategies.

Karen holds a Joint Master of Environmental Science, Policy and Management degree from Lund University (Sweden), University of Manchester (UK), Central European University (Hungary), and University of the Aegean (Greece) and a Bachelor of Environmental Science degree from Kenyatta University.

Currently at Safaricom, Karen serves as the Director of Sustainable Business, Social Impact, and The Foundations. She is passionate about the interplay between People, Purpose, and Profits.

She has served on various University Councils, the Governing Council of KEPSA as Vice Chair of the Environment Sector Board, and as a Strategic Advisor on multiple Boards. She has been recognised as an SDG Pioneer by the Global Compact Kenya.

Contact: Tel: +254722540162 | Email: kbasiye@safaricom.co.ke or kbasiye@gmail.com

This will close in 0 seconds

About Robert Hutchinson

Robert Hutchinson is a seasoned strategic leader and risk management professional with over 20 years of experience guiding organizations through complexity, uncertainty, and change. He currently serves as Group Head – Corporate Risk Management at Castor Vali Africa Limited, overseeing business strategy, client engagement, and regional growth. Robert also serves as a board member at BCCK, providing insight on corporate governance and risk.

Robert advises boards and executive teams on identifying and managing risks to enable responsible, scalable investment across Africa, with particular focus on infrastructure, climate risk, and societal resilience. He has supported multinational clients and development finance institutions in fragile and conflict-affected environments, including Sudan and Ethiopia.

Previously, Robert was Business Resilience Director for PwC Africa, leading enterprise risk management, physical security, and crisis coordination across 16 countries during the COVID-19 pandemic. His earlier career includes senior consultancy roles in natural resources and distinguished service in the British Army, where he achieved early promotion to Major and served in operational and strategic intelligence roles.

Combining deep African market insight with international risk expertise, Robert mentors emerging leaders on decision-making, resilience, and team development, helping organizations navigate uncertainty and achieve lasting impact.

This will close in 0 seconds

About Joyce Kibe

Joyce Kibe joined the Bank in 2021, bringing with her extensive expertise in marketing, communications, consumer insights, innovation, and strategic planning. She is recognised for her strong commercial acumen, skilful stakeholder engagement, and ability to transform data into actionable strategies that drive extraordinary business results.

Joyce has 22 years of professional experience, having held leadership roles across Kenya, Nigeria, the UK, and Zimbabwe. Her career includes tenures at British American Tobacco and East African Breweries, where she consistently delivered award-winning marketing strategies and measurable business impact.

This will close in 0 seconds

About Titus Mukora

Mr. Titus Mukora is a seasoned transfer pricing expert with over 16 years of specialised experience in the field. Prior to focusing on transfer pricing, he worked as a legal associate and general tax consultant, building a strong foundation in corporate taxation and compliance.

Titus has conducted numerous transfer pricing studies across multiple industries and territories in Africa, including Kenya, Uganda, Tanzania, Nigeria, Malawi, Zambia, Zimbabwe, Mozambique, and South Africa. He has also undertaken transfer pricing engagements for companies in Australia. His expertise spans compliance, structuring, and defense work, providing actionable solutions to complex tax and business challenges.

Currently, Titus focuses on integrating transfer pricing into corporate business strategies, supporting companies from a compliance, transaction, and supply chain perspective. His work ensures that businesses navigate regulatory requirements effectively while aligning tax strategy with operational and strategic objectives.

This will close in 0 seconds

About Patricia Ithau

Patricia Ithau is a passionate advocate for Africa’s human capital, dedicated to transforming the continent’s fortunes on the global stage. She believes in building role models in the corporate and entrepreneurial space, connecting resources to help enterprises overcome challenges and seize opportunities to realize their full potential.

Her career spans 25 years across three global companies – Unilever, Diageo/EABL, and L’Oreal – where she honed her expertise in identifying consumer and commercial insights, developing brands, and growing businesses. In the last 8 years of her corporate career, she focused on establishing new organizations and entering new markets as Managing Director of Uganda Breweries Ltd, Managing Director of EABL International, and the inaugural Managing Director of L’Oreal East Africa Ltd. At L’Oreal East Africa, she grew the business to $25 million in revenue, employed over 270 people, manufactured 40 million units per year, and successfully completed one of the first acquisitions of a local business in the market.

Patricia pivoted her focus to scaling and transforming SMEs, the largest job creation sector in emerging economies. She is currently the Regional Director for the Stanford Institute for Innovation in Developing Economies – Seed, supporting SME growth across East and Southern Africa. Over the last five years, the program has scaled more than 200 small to mid-size companies, delivering measurable impact.

She serves on the boards of ABSA Bank Kenya Ltd, the Kenya Private Sector Alliance (KEPSA), Jambojet Ltd, and Vivo ActiveWear Ltd, contributing her expertise in enterprise growth. Patricia also supports development funding and social sustainability investment as a board member of TradeMark East Africa (TMEA) and as a Trustee on the Board of the Vodafone Foundation, UK.

This will close in 0 seconds

About John Rogers

John Rogers leads the East Africa business for Turner & Townsend – a global professional services firm operating in the real estate, infrastructure, and natural resources sectors. He is a member of the Turner & Townsend Africa Board and chairs the East Africa Board. Before joining Turner & Townsend, he was the Managing Director for MML (formerly Mentor Management Limited), an Actis-owned company, and in 2018 oversaw the merger between MML and Turner & Townsend.

Since joining Turner & Townsend, John has expanded the company’s footprint to 7 countries in East Africa and is leading entry into new markets. He is a commercially astute, engaging, and results-driven executive with more than 15 years of construction experience across the Middle East, UK, and Ireland. John has led multicultural teams through project development, procurement, and realization in both private and public sectors, working with governments, industry authorities, asset owners, investors, capital programmes, and supply chain partners.

Through leading teams to deliver outstanding project outcomes, John has helped organizations, economies, and societies realize lasting benefits. Notable projects he has led include the Nexus Green Solar Water Pumping Systems funded by UKEF, East Africa Breweries Limited Biomass Steam Plants in Kenya and Uganda, the Nairobi Gate Industrial Park, the Kenya Roads Annuity Programmes (Lot 15 and Lot 18), and the Tilenga project, part of the East Africa Crude Oil Pipeline project. He is passionate about data, technology, and raising standards in construction in Africa, driving productivity, safety, efficiency, and sustainability. John believes that leading digitally provides the opportunity to set the pace and positively transform the industry.

John brings a wealth of knowledge from diverse geographies and roles. His board involvement focuses on connecting organizations and programmes to leading practices, supporting opportunities for successful investment, and unlocking innovation and global best practices.

This will close in 0 seconds

//If you are using multiple widgets on your website, please be sure that this line appears only one time per page.

// Or use the following line if your site uses requireJS


This will close in 0 seconds

About Ms. Anne Muraya

Anne Muraya is the CEO of Deloitte East Africa. She oversees the firm’s operations in Kenya, Tanzania, Uganda, Ethiopia, Malawi and Zambia. She also represents the region in the Africa Executive Committee which is responsible for setting the strategic direction and focus areas of the Africa business and overseeing the implementation of the strategy.

Anne leads a team of brilliant professionals across the region and considers herself their chief cheerleader. She views her role as switching on the lights so that the strategy is clear and everyone understands why they do what they do. She believes in nurturing and enabling staff so that they can solve complex problems for clients, and grow into the leaders of tomorrow.

Before this role, Anne was the East Africa Audit Leader and Managing Director for Responsible Business and Public Policy for Africa. She has built a wealth of experience serving clients in the banking and financial services, manufacturing, agriculture and retail industries. As a partner, she was also the National Professional Practice Director for the East Africa practice, leading technical consultations on audit methodology and IFRS.

Anne has also served on the Deloitte Global Advisory Council, where she was chosen as one of 30 partners worldwide to serve as a sounding board for the Deloitte Global CEO. Anne was a member of the Professional Standards Committee of the Institute of Certified Public Accountants of Kenya (ICPAK). In 2020, she was inducted into the College of Fellows of ICPAK in recognition of services rendered to the profession.

One of the ways Anne pays it forward is by mentoring girls and women.

This will close in 0 seconds