Privacy Policy

1. Introduction

Bulwark Risk Group ("BRG", "we", "us", or "our") provides strategic advisory, risk analysis, and situational awareness services across the Greater Horn of Africa. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit bulwarkriskgroup.com (the "Site") or otherwise interact with us.

By using the Site, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We may collect the following categories of information:

• ▸Contact information you provide, such as name, email address, phone number, organisation, and message content when you submit an enquiry or subscribe to our newsletter.
• ▸Usage data, such as pages visited, time spent on the Site, referring URLs, browser type, device type, and approximate location, collected automatically via cookies and similar technologies.
• ▸Communications data, including records of correspondence when you contact us directly by email or phone.

3. How We Use Your Information

• ▸To respond to enquiries and provide the services you request.
• ▸To send newsletters and updates you have subscribed to.
• ▸To operate, maintain, and improve the Site.
• ▸To understand how the Site is used, via aggregated analytics.
• ▸To meet legal, regulatory, and security obligations.

4. Legal Basis for Processing

Where applicable data protection law requires it (including the Kenya Data Protection Act, 2019), we process personal data on the basis of your consent, our legitimate interests in operating and improving our services, and/or the need to perform a contract or respond to a request you have made.

5. Cookies

The Site uses cookies and similar technologies to operate correctly, understand usage, and improve our services. You can manage your cookie preferences at any time via the "Cookie Settings" link in the site footer. For full details on the categories of cookies we use and how to control them, see our Cookie Policy

6. Sharing of Information

We do not sell personal information. We may share information with:

• ▸Service providers who support our operations (e.g. hosting, email delivery, analytics), under confidentiality obligations.
• ▸Regulatory or law enforcement bodies where required by law.
• ▸Professional advisers, in connection with legal or compliance matters.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law, after which it is securely deleted or anonymised.

8. Data Security

We apply reasonable technical and organisational measures to protect information against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you may have the right to access, correct, delete, or restrict the use of your personal information, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details below.

10. International Transfers

As we operate across the Greater Horn of Africa, information may be processed in countries other than your own. Where this occurs, we take steps to ensure appropriate safeguards are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "last updated" date at the top of this page.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: