1. Introduction
Draco Agencies Auctioneers (DAA) (“we”, “our”, or “the Firm”) is committed to protecting the privacy and confidentiality of all personal data entrusted to us in the course of our operations as licensed auctioneers and officers of the court.
We process personal data in compliance with the Data Protection Act 2019 and all other applicable laws and regulations in Kenya.
2. Our Role as a Data Processor
In the course of providing auctioneering, debt recovery, repossession, and enforcement services, we primarily act as a Data Processor, processing personal data on behalf of:
Advocates and law firms
Courts and tribunals
Financial institutions (banks, SACCOs, microfinance institutions)
Landlords and property managers
Government and regulatory agencies
In certain instances, we may also act as a Data Controller where we independently determine the purpose and means of processing.
3. Data Protection Certification
The Firm is duly certified as a Data Processor by the Office of the Data Protection Commissioner, and adheres to all statutory requirements relating to:
Lawful processing of personal data
Data minimization and purpose limitation
Security safeguards
Accountability and record-keeping
4. Personal Data We Collect
We may collect and process the following categories of personal data:
4.1 Identification Data
Full names
National ID or passport details
PIN numbers (where applicable)
4.2 Contact Information
Phone numbers
Email addresses
Physical addresses
4.3 Financial Information
Debt records
Asset ownership details
Payment records
4.4 Legal and Enforcement Data
Court orders and case details
Proclamation inventories
Auction records
4.5 Website Data
IP address
Browser type
Cookies and usage data
5. Purpose of Processing
We process personal data strictly for lawful purposes, including:
Execution of court warrants and orders
Debt recovery and asset tracing
Repossession of secured assets
Distress for rent enforcement
Conducting public auctions
Compliance with legal and regulatory obligations
6. Legal Basis for Processing
Our processing activities are based on:
Compliance with legal obligations
Performance of a contract
Legitimate interests of our clients
Execution of a public or legal mandate
Consent (where applicable)
7. Data Sharing and Disclosure
We may share personal data with:
Courts and judicial officers
The National Police Service (for enforcement support)
Advocates and instructing clients
Financial institutions
Government agencies and regulators
We do not sell or unlawfully disclose personal data to third parties.
8. Data Security
We implement appropriate technical and organizational measures to safeguard personal data, including:
Secure data storage systems
Restricted access controls
Confidentiality obligations for staff and agents
Secure handling of physical and electronic records
9. Data Retention
Personal data is retained only for as long as necessary to:
Fulfill the purpose for which it was collected
Comply with legal and regulatory obligations
Resolve disputes and enforce agreements
10. Rights of Data Subjects
Under the Data Protection Act, individuals have the right to:
Be informed about the use of their personal data
Access their personal data
Request correction of inaccurate data
Request deletion of data (where applicable)
Object to processing
Lodge complaints with the regulator
Requests may be submitted through our contact details below.
11. Cookies and Website Tracking
Our website may use cookies to enhance user experience and analyze traffic. Users may control cookie preferences through their browser settings.
12. International Data Transfers
Where personal data is transferred outside Kenya, we ensure adequate safeguards are in place in accordance with applicable law.
13. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in legal or operational requirements. Updates will be published on our website.
14. Contact Information
For any privacy-related inquiries or requests, please contact:
Data Protection Officer
Draco Agencies Auctioneers
Email: [email protected]
Physical Address: Coffee Plaza, 2nd Fl, Suite 12, Exchange Ln off Haile Selassie Ave, Nairobi, Kenya
Phone: +254 731 720700
15. Complaints
If you are dissatisfied with how your personal data is handled, you may lodge a complaint with the:
Office of the Data Protection Commissioner
16. Disclaimer
This Privacy Policy applies to all personal data processed by the Firm in the course of its lawful auctioneering and enforcement activities.
