Skip to content

Legal

Privacy notice

How we collect, use and protect personal data under the Data Protection Act, 2019.

Last updated: 16 October 2026

Who we are

PVRA Solutions Limited ("PVRA", "we") is a pharmacovigilance and regulatory affairs consultancy based in Eldoret, Kenya. We are the data controller for the personal data described in this notice. You can contact us at info@pvrasolutions.com.

What we collect

  • Enquiries: your name, email address, phone number, company and the message you send us.
  • Bookings: your contact details, the session you book, your answers to our booking questions and any file you choose to attach.
  • Newsletter: your email address and, if you give it, your name.
  • Training registrations: your contact details and the course and session you choose.
  • Website use: technical data needed to run the site securely, such as your IP address and browser type. Analytics cookies are only set if you accept them.

Why we use it and our legal basis

  • To answer your enquiry, arrange and hold a consultation, or deliver training: to take steps at your request before entering into a contract, and to perform that contract.
  • To send our newsletter: your consent, which you can withdraw at any time with the link in every email.
  • To keep our website secure and to keep records required by law: our legitimate interests and our legal obligations.

We never sell your personal data, and we do not use it for automated decision-making.

Who we share it with

We share personal data only with service providers who help us run our business, such as our website host, email provider and, when you book an online meeting, the video-meeting provider. They act on our instructions and must keep your data secure. We may disclose data where the law requires it.

Transfers outside Kenya

Some of our providers may store data outside Kenya. Where this happens we rely on the safeguards required by the Data Protection Act, 2019 and its regulations.

How long we keep it

We keep enquiry, booking and registration records for up to 24 months after our last contact with you, unless a longer period is required by law or for an ongoing engagement. After that the data is deleted or anonymised. Newsletter data is kept until you unsubscribe.

Your rights

Under the Data Protection Act, 2019 you have the right to be informed of how your data is used, to access it, to object to its processing, and to have inaccurate data corrected or data deleted. To exercise these rights, email info@pvrasolutions.com. We will reply within the time the law allows.

If you are not satisfied with our response you may complain to the Office of the Data Protection Commissioner (ODPC), www.odpc.go.ke.

Security

Our website uses encryption (HTTPS). Access to personal data is limited to the people who need it, staff accounts are protected with two-factor authentication, and uploaded files are stored privately.

Changes

We may update this notice. The date at the top shows when it was last changed.