Legal

Privacy Policy

How we handle the information you share with us through this website and during an engagement.

Template for legal review. This policy reflects VeroMed’s stated practices but has not been reviewed by counsel. Have it checked against the Kenya Data Protection Act, 2019 and registered with the Office of the Data Protection Commissioner where required before publication.

1. Who we are

VeroMed is a regulatory affairs, quality assurance and intellectual property consultancy operating as a licensed Scientific Office in Nairobi, Kenya. For questions about this policy, contact winnie.mamo@veromedinc.com.

2. Information we collect

  • Enquiry details you submit through our contact form: name, company, email address, telephone number, product details, service of interest, and the content of your message.
  • Newsletter details: the email address you provide when subscribing to regulatory intelligence briefs.
  • Engagement information: dossiers, quality documentation, product data, and correspondence shared during a client engagement.
  • Technical information: standard server log data such as IP address, browser type and pages visited, used to keep the site secure and functioning.

3. How we use it

  • To respond to your enquiry and prepare a proposal.
  • To deliver contracted regulatory, quality and intellectual property services.
  • To meet our own legal, regulatory and record-keeping obligations.
  • To send regulatory updates where you have asked to receive them. You may unsubscribe at any time.

4. Legal basis

We process personal data on the basis of your consent, the performance of a contract, and our legitimate interest in operating and securing this website. Where processing relies on consent, you may withdraw it at any time.

5. Sharing

We do not sell personal data. We share information only where it is necessary to deliver the service you have engaged us for — for example with the Pharmacy and Poisons Board, the Kenya Industrial Property Institute, or a partner named in your engagement — or where we are required to do so by law.

6. Confidential client information

Commercially sensitive material shared during an engagement is handled under our Confidentiality Commitment and, where executed, the confidentiality agreement between us. Secure document-handling protocols and controlled access systems apply.

7. Retention

We retain regulatory and engagement records for as long as is necessary to deliver the service and to satisfy applicable statutory and regulatory retention obligations. Enquiry data that does not lead to an engagement is deleted once it is no longer needed.

8. Your rights

Subject to applicable law, you may request access to the personal data we hold about you, ask for it to be corrected or deleted, object to or restrict its processing, and request a copy in a portable format. Write to winnie.mamo@veromedinc.com and we will respond within the statutory period.

9. Cookies

This website uses only the cookies necessary for it to function. If analytics or marketing cookies are introduced, this policy and a consent notice will be updated before they are set.

10. Changes

We may update this policy. The version in force is the one published on this page.

Last updated: 2026.

Planning market entry?

Let’s map your pathway into Kenya — before you commit resources.

A short scoping conversation tells you which PPB pathway applies, what your dossier is missing, and what the realistic timeline looks like.