Privacy Policy

LEGAL POLICY

Client Connect Solutions Ltd

Version: 1.0

Effective Date: September 2026

1. Purpose

Client Connect Solutions Ltd ("the Company") is committed to conducting its Business Process Outsourcing (BPO) operations in compliance with all applicable laws of Kenya and international contractual obligations with clients. This Legal Policy establishes the legal standards governing the Company's operations, employees, contractors, and third-party service providers.

2. Scope

This policy applies to:

  • All permanent, temporary, contract, and remote employees.

  • Consultants, interns, and outsourced personnel.

  • Third-party vendors and service providers engaged by the Company.

  • All client projects handled by Client Connect Solutions Ltd.

The Company shall comply with applicable Kenyan laws, including:

  • Constitution of Kenya, 2010.

  • Employment Act, 2007.

  • Labour Relations Act, 2007.

  • Data Protection Act, 2019 and related Regulations.

  • Occupational Safety and Health Act (OSHA), 2007.

  • Computer Misuse and Cybercrimes Act, 2018.

  • Kenya Information and Communications Act.

  • Any other applicable laws governing BPO and IT-enabled services.

4. Employment Compliance

The Company shall:

  • Provide written employment contracts to all employees.

  • Ensure equal employment opportunities without discrimination.

  • Comply with statutory working hours, overtime, leave, and public holiday requirements.

  • Deduct and remit statutory contributions (PAYE, NSSF, SHA, Housing Levy, and other applicable deductions).

  • Maintain fair disciplinary and grievance procedures consistent with the Employment Act.

5. Data Protection and Confidentiality

Client Connect Solutions Ltd recognizes that it processes personal and confidential client information.

The Company shall:

  • Process personal data lawfully, fairly, and transparently.

  • Collect only data necessary for legitimate business purposes.

  • Maintain appropriate technical and organizational security measures.

  • Register as a Data Controller and/or Data Processor where required by law.

  • Require employees and contractors to sign Confidentiality and Non-Disclosure Agreements (NDAs).

  • Report data breaches in accordance with the Data Protection Act.

Employees shall not:

  • Share client information without authorization.

  • Download, copy, or transmit company or client data to personal devices unless approved.

  • Use client information for personal benefit.

6. Intellectual Property

  • All work products created during employment belong to Client Connect Solutions Ltd or the respective client as provided in contractual agreements.

  • Employees shall respect copyrights, trademarks, software licenses, and client intellectual property.

7. Information Security

The Company shall:

  • Implement password and access-control policies.

  • Use secure communication systems.

  • Restrict access to client systems based on job responsibilities.

  • Monitor company systems only in accordance with Kenyan privacy laws and internal policies.

8. Workplace Conduct

Employees are expected to:

  • Maintain professionalism in all client interactions.

  • Avoid harassment, discrimination, bullying, and retaliation.

  • Protect the Company's reputation.

  • Avoid conflicts of interest and disclose any potential conflicts.

9. Anti-Bribery and Anti-Corruption

Client Connect Solutions Ltd maintains zero tolerance for bribery, fraud, corruption, facilitation payments, and unethical conduct.

Employees shall:

  • Not solicit or accept improper gifts or benefits.

  • Report suspected fraud or corruption immediately.

  • Cooperate with internal investigations.

10. Compliance with Client Contracts

The Company shall:

  • Comply with contractual Service Level Agreements (SLAs).

  • Protect client confidential information.

  • Observe contractual compliance requirements, including international privacy obligations where applicable.

11. Remote Working and Digital Workplace

Where employees work remotely:

  • Company-approved devices and systems shall be used where required.

  • Employees must protect confidential information while working outside company premises.

  • Secure internet connections and authentication measures shall be maintained.

12. Incident Reporting

Employees must immediately report:

  • Data breaches.

  • Cybersecurity incidents.

  • Fraud or suspected illegal activities.

  • Workplace safety incidents.

  • Legal notices or complaints received from clients or regulators.

13. Training and Awareness

The Company shall conduct regular training on:

  • Employment law compliance.

  • Data protection and privacy.

  • Cybersecurity awareness.

  • Anti-corruption and ethical conduct.

  • Client confidentiality requirements.

14. Policy Enforcement

Violation of this policy may result in:

  • Disciplinary action.

  • Termination of employment or contract.

  • Civil or criminal liability where applicable under Kenyan law.

15. Policy Review

This Legal Policy shall be reviewed annually or whenever there are significant changes in Kenyan laws, regulations, or client compliance requirements.