On this page
Elsa Bureau (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data responsibly. This policy explains what we collect and why, and your rights under the Data Protection Act, 2019 of Kenya. It applies to our website, our offices, and all services we provide.
1. Who we are
Elsa Bureau is a digital services provider offering online government filings (such as KRA, TSC, HELB, SHA, NSSF, and immigration), virtual assistance, and consulting. We act as a data controller for the personal data you share with us.
- Location: Mid Africa Hotel Building, Ground Floor, Rooms 1 & 2, Kitale Town, Trans-Nzoia County, Kenya
- Email: elsabureau@gmail.com
- Phone / WhatsApp: +254 729 103 060
2. Information we collect
To deliver our services, we may collect:
- Identity & contact data: full name, ID/passport number, KRA PIN, phone number, email, and postal address.
- Service data: documents and details you provide for a specific filing or task (for example tax, employment, education, health, or immigration information).
- Payment data: M-Pesa transaction details and references needed to confirm payment. We do not store your M-Pesa PIN.
- Communications: messages you send us by form, email, WhatsApp, or phone.
- Technical data: basic website usage information such as browser type and pages visited.
Some of this may be sensitive personal data under the Act (for example health or financial information). We handle it with extra care and only as needed to perform the service you request.
3. How we use your information
- To complete the filings, applications, and services you request, on your behalf and with your authorisation.
- To process payments, deposits, and issue receipts and invoices.
- To communicate with you about your request, deadlines, and updates.
- To keep records, meet legal obligations, and improve our services.
4. Our lawful basis for processing
We process your personal data on the basis of your consent, the performance of our contract with you, our need to comply with a legal obligation, and our legitimate interests in running our business, as permitted by the Data Protection Act, 2019.
5. Sharing & disclosure
We only share your data where necessary:
- Government portals and agencies (e.g. KRA/iTax, TSC, HELB, SHA, NSSF, eCitizen, Immigration) to submit the filings you have asked us to make on your behalf.
- Vetted partners or professionals who help deliver a service to you, under confidentiality obligations.
- Payment providers (Safaricom M-Pesa) to process transactions.
- Authorities where we are required to do so by law.
We do not sell your personal data to anyone.
6. Payments & M-Pesa
Payments are processed securely through Safaricom M-Pesa. We receive confirmation of your payment and a transaction reference, but we never see or store your M-Pesa PIN. Your card or bank details, where applicable, are handled by the relevant payment provider.
7. Data retention
We keep your personal data only for as long as needed to provide the service, meet legal and tax record-keeping requirements, and resolve any disputes. When it is no longer needed, we securely delete or anonymise it.
8. How we protect your data
- Secure (https) connections on our website.
- Restricted staff access on a need-to-know basis.
- Strong passwords and secure storage of documents.
- Prompt deletion of documents we no longer need.
9. Your rights
Under the Data Protection Act, 2019 you have the right to:
- Be informed about how your data is used.
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data, where appropriate.
- Object to or restrict certain processing.
- Withdraw consent at any time.
To exercise any of these rights, contact us at elsabureau@gmail.com. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.
10. Cookies
Our website may use basic cookies to help it function and to understand how visitors use it. You can control cookies through your browser settings.
11. Changes & contact
We may update this policy from time to time. The latest version will always be posted on this page with a revised date. Questions? Email elsabureau@gmail.com or call +254 729 103 060.