Compliance documents drafted for Kenyan law.
Not a GDPR template with "Kenya" swapped in. A privacy policy that references the Data Protection Act 2019, names the rights your users have under Kenyan law, and won't embarrass you when the ODPC comes looking.
Generate your policy — free →Free preview · No credit card · Takes 5 minutes
Privacy Policy for
[Your Business Name]
Most Kenyan websites are using the wrong privacy policy.
Copy a US or UK template from Google
It references GDPR, CCPA, and California law. It mentions "cookies" but not the Kenya DPA 2019. It doesn't name the ODPC. It doesn't mention data localization. It doesn't list the rights Kenyan data subjects have under Section 26 of the DPA 2019 — the right to be informed, to access, to object, to correct, and to delete. If the Data Commissioner's office audits you, this policy is worth nothing.
Pay an advocate four to five figures
A law firm will draft you a proper policy. It will be correct. It will also take 2–4 weeks, cost more than most small businesses can justify, and become outdated the moment the ODPC issues new guidance — which they do regularly.
Answer 15 questions. Get drafted documents.
Sheria Digital asks you what data you collect, why, from whom, where you store it, and who you share it with. In five minutes you get a privacy policy, cookie policy, and data subject request form that actually reference the Data Protection Act 2019 — the law that applies to your business.
Update when the law changes. Not when you remember.
When the ODPC issues new regulations or guidance notes, we update the templates. Your documents stay current. No advocate retainer needed.
Three steps. Five minutes.
Tell us about your business
Company name, what personal data you collect, why you collect it, where you store it, whether you transfer it outside Kenya, your DPO contact if you have one. Fifteen short questions — no legal jargon, no ambiguity.
Review your documents
Sheria Digital generates a privacy policy, cookie policy, and data subject request form tailored to your answers. Every clause references the specific DPA 2019 sections that apply to you. Read it, edit it, make it yours.
Download and publish
Export in Word, PDF, or HTML. Paste it on your website footer, send it to your app developer, include it in your ODPC registration application. Done.
Generate three documents. One form.
More documents. Same simplicity.
Less than one hour of advocate time.
- All 3 documents (watermarked)
- Full preview
- No account required
- Privacy policy (no watermark)
- Cookie & consent policy
- Data subject request form
- Word + PDF + HTML export
- Free updates for 12 months
- Everything in Starter
- Data Processing Agreement
- DPIA template
- Breach notification letter
- Employee data policy
- Free updates for 24 months
Compare: A KENYAN ADVOCATE WILL DRAFT THESE FOR YOU. THEY WILL ALSO CHARGE FOUR TO FIVE FIGURES AND TAKE WEEKS.
Answered honestly.
No. Sheria Digital generates compliance documents based on the requirements of the Data Protection Act 2019 (Cap. 411C) and its subsidiary regulations. The documents are drafting assistance, not legal advice. For complex or high-risk data processing, we recommend having an advocate review the documents before publishing them.
Termly and iubenda are built for US and EU law. They reference GDPR, CCPA, and CalOPPA. Sheria Digital is built specifically for the Kenya Data Protection Act 2019. Our documents reference the correct Kenyan statute (Cap. 411C), name the ODPC as the supervisory authority, address Kenya's data localization provisions under Sections 48 and 50, and list the specific rights data subjects have under Section 26 of the Act. These are not the same as GDPR rights.
Yes. The Office of the Data Protection Commissioner has been issuing enforcement notices under Section 58, conducting compliance audits under Section 23, and publishing guidance notes for specific sectors. Non-compliance can result in administrative fines of up to KES 5 million or 1% of annual turnover under Section 63, and criminal penalties of up to KES 3 million and 10 years imprisonment under Section 73.
When the ODPC issues new regulations or guidance, we update the templates. The Act was revised by the 24th Annual Supplement (Legal Notice 221 of 2023) and we track subsequent amendments. If you purchased a Starter or Professional package, you receive updated documents at no additional cost during your update period.
Yes. You can copy the text and paste it into Word, Google Docs, or any editor. You can also copy the HTML to embed directly on your website. The generated document is a starting point, not a locked file — add clauses, change wording, incorporate advice from your advocate.
The ODPC won't wait.
Neither should you.
Generate your first document free. No credit card required.
Generate your policy — free →Free preview · No credit card · Takes 5 minutes
Get notified when we launch new documents
DPA templates, breach notification letters, and more — coming soon.