Privacy Policy
Last updated: 10 August 2026
The Ledger respects your privacy.
This Privacy Policy explains what personal information we collect when you visit or interact with The Ledger, why we collect it, how we use it, when we may share it and the choices available to you.
The Ledger is a business news publication based in Kenya. We operate our website at www.theledgerafrica.media and may provide related digital services, newsletters, events, communications and other products from time to time.
We believe privacy policies should be readable. This one is written for our readers, not lawyers.
1. Who we are
The Ledger is the data controller responsible for personal information collected through our website and related services, except where another organisation is expressly responsible for processing your information on our behalf.
For privacy-related enquiries, contact:
Email: privacy@theledgerafrica.media
The Ledger
Kenya
2. What information we collect
We collect information in different ways depending on how you use The Ledger.
Information you give us
You may provide personal information when you:
- Subscribe to a newsletter;
- Contact us by email;
- Submit a story tip;
- Send a correction request;
- Contact our editorial team;
- Apply for a job;
- Register for an event;
- Enter a competition or promotion;
- Respond to a survey;
- Make a commercial or partnership enquiry; or
- Otherwise communicate with us.
This information may include your name, email address, telephone number, organisation, job title and any other information you choose to provide.
Please do not send us information you do not want us to receive.
Information collected automatically
When you visit our website, certain technical information may be collected automatically.
This can include:
- IP address;
- Browser and device type;
- Operating system;
- Pages visited;
- Date and time of visits;
- Referring website;
- Approximate location derived from technical information;
- Website interactions; and
- Other technical information required to operate, secure and improve the website.
We use this information primarily to understand how the website is used, maintain security, identify technical problems and improve our services.
3. How we use your information
We use personal information for legitimate and clearly defined purposes.
These may include:
Providing our services
To deliver newsletters, respond to enquiries, provide information you request and administer services or events you have chosen to use.
Journalism
Information provided to The Ledger may be used for journalistic purposes where there is a legitimate editorial reason to do so.
Journalistic processing can involve contacting individuals, verifying information, investigating matters of public interest and publishing information.
The privacy of individuals remains important to us. However, journalism sometimes requires information to be processed or published in the public interest. We assess such decisions carefully and in accordance with applicable law and our editorial standards.
Communications
If you subscribe to a newsletter or otherwise ask to receive communications from us, we may use your contact details to send those communications.
You can unsubscribe at any time.
Website improvement
We may use technical and usage information to understand how readers use our website and to improve its performance, content and usability.
Security
We may process information to detect, prevent and investigate fraud, abuse, unauthorised access and other security incidents.
Legal and regulatory obligations
We may process or retain information where necessary to comply with applicable law, respond to lawful requests or establish, exercise or defend legal claims.
4. Our legal basis for processing
Depending on the circumstances, The Ledger may process personal information on one or more lawful grounds recognised under applicable data protection law.
These may include:
- Your consent;
- Performance of a contract or taking steps at your request before entering into one;
- Compliance with a legal obligation;
- Protection of vital interests where applicable;
- Performance of a task carried out in the public interest; or
- A legitimate interest that does not override your fundamental rights and freedoms.
Where we rely on consent, you may withdraw that consent. Withdrawal does not affect processing that took place before the withdrawal.
Not every use of personal information requires consent. In particular, journalism and other lawful activities may be subject to different legal grounds.
5. News tips and confidential sources
The Ledger is a news organisation.
People may contact our journalists with information because they believe it is in the public interest or because they wish to report something that deserves investigation.
We take source confidentiality seriously.
Where a journalist has agreed to protect a source’s identity, we will not ordinarily disclose that identity unless required by law or otherwise legally obliged to do so.
People sending confidential information should understand that electronic communication cannot be guaranteed to be completely secure.
If you are submitting sensitive information, consider contacting the relevant journalist before sending documents or other material.
6. Information published by The Ledger
As a news organisation, The Ledger may publish information about individuals, companies, public institutions and other organisations where there is a legitimate editorial or public-interest reason to do so.
Published information may remain accessible after publication because news archives form part of the public record.
We do not treat a privacy request as an automatic right to remove accurate journalism.
Requests relating to inaccurate, misleading or unlawfully published personal information will be considered carefully and in accordance with applicable law and our editorial standards.
Where appropriate, we may correct, update, annotate or otherwise amend published material.
7. Newsletters
If you subscribe to a Ledger newsletter, we will use the information you provide to deliver that newsletter and manage your subscription.
We may also collect information about whether a newsletter was delivered, opened or interacted with, where our newsletter technology supports such measurement.
You can unsubscribe using the link provided in our emails or by contacting us.
We do not regard signing up for a newsletter as permission to send unrelated marketing communications.
8. Cookies and similar technologies
The Ledger may use cookies and similar technologies.
Cookies are small files placed on your device that can help a website remember information, maintain functionality, understand usage and improve the user experience.
Some cookies may be necessary for the website to function.
Other cookies may be used for analytics, preferences or other purposes depending on the services operating on our website.
Where applicable, we will provide appropriate choices and information about non-essential cookies.
You can also manage cookies through your browser settings.
Our separate Cookie Policy explains these technologies in greater detail.
9. Analytics and website measurement
We may use analytics tools to understand how visitors use The Ledger.
Depending on the tools we operate, this may include information such as pages viewed, approximate location, device type, traffic sources and interactions with the website.
Analytics information is used to understand readership and improve the website. It is not intended to identify individual readers unnecessarily.
We will update this policy when specific analytics services are introduced or materially changed.
10. Advertising
The Ledger may carry advertising.
Advertising technology may involve cookies, identifiers or other technical information to deliver, measure or improve advertising, depending on the systems used on the website.
Where third-party advertising services process information, their own privacy policies may also apply.
Advertising does not give advertisers editorial control over The Ledger.
Our editorial and commercial activities are governed by separate standards.
11. Sponsored and commercial content
The Ledger may work with commercial partners on sponsored content, events, research, campaigns and other activities.
Commercial partners may provide us with information necessary to manage these relationships.
Sponsored material is identified as such.
A commercial relationship does not give a sponsor the right to access personal information collected for unrelated purposes or to control independent editorial coverage.
12. Information we share
We do not sell your personal information.
We may share personal information where reasonably necessary for the purposes described in this policy.
This may include sharing information with:
- Service providers that operate technology or services on our behalf;
- Newsletter and communications providers;
- Website hosting and technical support providers;
- Event or registration service providers;
- Professional advisers;
- Regulators, courts or law-enforcement authorities where legally required; or
- Other parties where you have asked us to share the information or have otherwise authorised the disclosure.
Where we use a third-party processor, we expect that organisation to process information only for authorised purposes and to apply appropriate safeguards.
13. International transfers
Some technology and service providers used by The Ledger may process information outside Kenya.
Where personal information is transferred outside Kenya, we will take reasonable steps to ensure that the transfer and subsequent processing comply with applicable data protection requirements and that appropriate safeguards are in place where required.
Where a transfer relies on your consent, we will provide the information required for you to make an informed decision.
14. How long we keep information
We do not keep personal information indefinitely simply because we can.
We retain information for as long as reasonably necessary for the purpose for which it was collected, or where retention is required for legal, regulatory, security, accounting, journalistic or other legitimate purposes.
Different types of information may therefore be retained for different periods.
For example, newsletter subscription information may be retained while you remain subscribed, whereas editorial records may need to be retained for substantially longer as part of our journalistic archive.
When information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.
15. Keeping your information secure
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure authentication, restricted access to information, security monitoring, backups and other appropriate safeguards.
No internet service can guarantee absolute security.
If we become aware of a personal data breach that requires notification under applicable law, we will take the appropriate steps to assess, contain and report the incident and notify affected individuals where required.
16. Your rights
Under Kenya’s data protection framework, you have rights in relation to your personal information.
Depending on the circumstances, these include the right:
- To be informed about how your information is being used;
- To access personal information we hold about you;
- To object to certain processing;
- To request correction of inaccurate or misleading information;
- To request deletion of false or misleading personal information;
- To withdraw consent where processing is based on consent; and
- To exercise other rights available under applicable law.
These rights are not absolute.
For example, the right to deletion does not necessarily mean that accurate journalism must be removed from a news archive. Other legal rights, obligations and public-interest considerations may apply.
The Office of the Data Protection Commissioner (ODPC) recognises rights including information, access, objection, correction and deletion.
17. How to exercise your rights
To make a privacy request, contact:
Please provide enough information for us to understand your request and, where necessary, verify your identity.
We may ask for additional information where reasonably necessary to protect against unauthorised disclosure of personal information.
We will consider and respond to requests within the period required by applicable law.
There is normally no charge for exercising your data protection rights. We may, however, take appropriate steps where a request is manifestly unfounded, excessive or repetitive, where permitted by law.
18. Children
The Ledger is a general-audience business publication.
We do not knowingly collect personal information from children for purposes that are inappropriate or unlawful.
Where our services involve children’s personal information, we will apply the safeguards required by applicable law.
If you believe a child has provided personal information to us in circumstances where it should not have been collected, please contact us.
19. Third-party websites
Our website may contain links to websites, platforms or services operated by other organisations.
Once you leave The Ledger’s website, this Privacy Policy may no longer apply.
We encourage you to read the privacy policy of any external website before providing personal information.
The presence of a link does not mean that The Ledger endorses the privacy practices of the linked organisation.
20. Social media
The Ledger maintains accounts on social media platforms.
If you interact with us on those platforms, the platform may collect and process information according to its own privacy policy and terms.
Comments, replies and other public interactions may be visible to other users.
We encourage readers to consider carefully what personal information they disclose publicly.
21. Changes to this policy
We may update this Privacy Policy when our website, services, technology or legal obligations change.
When we make significant changes, we will update the date at the top of this page and, where appropriate, provide additional notice.
We encourage readers to review this page periodically.
22. Questions and complaints
If you have a question or concern about how The Ledger handles personal information, please contact us first.
Privacy enquiries:
privacy@theledgerafrica.media
We will make reasonable efforts to address your concern.
If you believe your rights under Kenya’s data protection framework have been infringed and the matter cannot be resolved with us, you may also contact the Office of the Data Protection Commissioner (ODPC), the statutory regulator responsible for data protection in Kenya.
The Ledger
Kenya
Enterprise, Elevated.
A note on this policy
This policy is intended to explain The Ledger’s approach to privacy in clear language. It should be read alongside our Terms & Conditions, Cookie Policy and Editorial Standards.
The final version should be reviewed against the actual technologies, plugins, third-party services and data flows operating on the website before publication.