Privacy Policy
Who we are
This website is operated by Okho Consulting Ltd, C/o Etika Financial Services Ltd, Level 6, Nexteracom Tower II, Ebene, Mauritius, which is the data controller for the personal data described below. For any question about this policy or about your personal data, write to romain.giraudet@okho-consulting.com.
What we collect
When you use our contact form, we collect your first and last name, your organisation, your email address, the topic you select and any message you write. When you contact us directly by email or telephone, we collect the information you choose to share with us. Our hosting provider also records standard technical data, including IP address, browser type and pages visited, for security and reliability purposes.
Why we collect it, and on what basis
We use this information solely to respond to your enquiry and, where relevant, to discuss a possible engagement. The legal basis is the steps taken at your request before entering into a contract, together with our legitimate interest in responding to people who contact us. We do not use your details for unsolicited marketing, we do not send newsletters, and we never sell or rent personal data.
Who has access, and where the data is held
Your message is received and stored by Squarespace Inc., our website provider, whose servers are located in the United States. It is also forwarded to our professional email accounts. Access is limited to the partners and consultants of Okho Consulting who need it in order to reply. We do not share your data with any other third party unless we are required to do so by law.
International transfers
Because our website provider is established in the United States, and our team works from Mauritius and Kenya, your data may be transferred outside the European Economic Area. These transfers are covered by the contractual safeguards our providers have put in place.
How long we keep it
We keep enquiry data for three years from our last exchange with you, after which it is deleted. Where an enquiry leads to a contract, the data is kept for the duration of the engagement and for the legal retention period that follows.
Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Write to [adresse email] and we will respond within one month.
If you are in the European Economic Area or the United Kingdom, you may also lodge a complaint with the data protection supervisory authority of your country. Otherwise, you may contact the Data Protection Office of Mauritius.
Changes to this policy
We may update this policy from time to time. The date below indicates the current version.
Last updated: September 2026