1. Introduction

Draco Agencies Auctioneers (DAA) (“we”, “our”, or “the Firm”) is committed to protecting the privacy and confidentiality of all personal data entrusted to us in the course of our operations as licensed auctioneers and officers of the court.

We process personal data in compliance with the Data Protection Act 2019 and all other applicable laws and regulations in Kenya.


2. Our Role as a Data Processor

In the course of providing auctioneering, debt recovery, repossession, and enforcement services, we primarily act as a Data Processor, processing personal data on behalf of:

  • Advocates and law firms

  • Courts and tribunals

  • Financial institutions (banks, SACCOs, microfinance institutions)

  • Landlords and property managers

  • Government and regulatory agencies

In certain instances, we may also act as a Data Controller where we independently determine the purpose and means of processing.


3. Data Protection Certification

The Firm is duly certified as a Data Processor by the Office of the Data Protection Commissioner, and adheres to all statutory requirements relating to:

  • Lawful processing of personal data

  • Data minimization and purpose limitation

  • Security safeguards

  • Accountability and record-keeping


4. Personal Data We Collect

We may collect and process the following categories of personal data:

4.1 Identification Data

  • Full names

  • National ID or passport details

  • PIN numbers (where applicable)

4.2 Contact Information

  • Phone numbers

  • Email addresses

  • Physical addresses

4.3 Financial Information

  • Debt records

  • Asset ownership details

  • Payment records

4.4 Legal and Enforcement Data

  • Court orders and case details

  • Proclamation inventories

  • Auction records

4.5 Website Data

  • IP address

  • Browser type

  • Cookies and usage data


5. Purpose of Processing

We process personal data strictly for lawful purposes, including:

  • Execution of court warrants and orders

  • Debt recovery and asset tracing

  • Repossession of secured assets

  • Distress for rent enforcement

  • Conducting public auctions

  • Compliance with legal and regulatory obligations


6. Legal Basis for Processing

Our processing activities are based on:

  • Compliance with legal obligations

  • Performance of a contract

  • Legitimate interests of our clients

  • Execution of a public or legal mandate

  • Consent (where applicable)


7. Data Sharing and Disclosure

We may share personal data with:

  • Courts and judicial officers

  • The National Police Service (for enforcement support)

  • Advocates and instructing clients

  • Financial institutions

  • Government agencies and regulators

We do not sell or unlawfully disclose personal data to third parties.


8. Data Security

We implement appropriate technical and organizational measures to safeguard personal data, including:

  • Secure data storage systems

  • Restricted access controls

  • Confidentiality obligations for staff and agents

  • Secure handling of physical and electronic records


9. Data Retention

Personal data is retained only for as long as necessary to:

  • Fulfill the purpose for which it was collected

  • Comply with legal and regulatory obligations

  • Resolve disputes and enforce agreements


10. Rights of Data Subjects

Under the Data Protection Act, individuals have the right to:

  • Be informed about the use of their personal data

  • Access their personal data

  • Request correction of inaccurate data

  • Request deletion of data (where applicable)

  • Object to processing

  • Lodge complaints with the regulator

Requests may be submitted through our contact details below.


11. Cookies and Website Tracking

Our website may use cookies to enhance user experience and analyze traffic. Users may control cookie preferences through their browser settings.


12. International Data Transfers

Where personal data is transferred outside Kenya, we ensure adequate safeguards are in place in accordance with applicable law.


13. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal or operational requirements. Updates will be published on our website.


14. Contact Information

For any privacy-related inquiries or requests, please contact:

Data Protection Officer

Draco Agencies Auctioneers

Email: [email protected]

Physical Address: Coffee Plaza, 2nd Fl, Suite 12, Exchange Ln off Haile Selassie Ave, Nairobi, Kenya

Phone: +254 731 720700


15. Complaints

If you are dissatisfied with how your personal data is handled, you may lodge a complaint with the:

Office of the Data Protection Commissioner


16. Disclaimer

This Privacy Policy applies to all personal data processed by the Firm in the course of its lawful auctioneering and enforcement activities.