Website Terms of Service (Kenya)
WEBSITE TERMS OF SERVICE
Consumer Protection Act No. 46 of 2012 | Computer Misuse and Cybercrimes Act No. 5 of 2018 | Data Protection Act No. 24 of 2019 | Copyright Act Cap. 130
Operator: [Operator Name] | BRS No.: [BRS Number] | KRA PIN: [KRA PIN]
Website: [Website URL] | Contact: [Contact Email] | [Contact Phone]
Registered address: [Physical Address]
Effective date: [Effective Date] | Last updated: [Last Updated]
PLEASE READ THESE TERMS OF SERVICE CAREFULLY BEFORE USING [Website URL]. By accessing or using this website or platform, you confirm that you have read, understood, and agree to be bound by these Terms of Service and our Privacy Policy. If you do not agree, you must cease using the platform immediately.
These Terms of Service constitute a legally binding contract under the Kenya Information and Communications Act Cap. 411A Section 83P, which recognises electronic contracts and electronic acceptance as valid and enforceable under the laws of Kenya.
1. THE PLATFORM AND SERVICES
1.1 [Operator Name] operates [Website URL], which provides the following: [Platform Description]
1.2 Platform type: [Platform Type]
1.3 Age requirement: This platform is restricted to users aged [Age Restriction]. By using this platform, you confirm that you meet this age requirement. Where the platform is used on behalf of a minor with parental consent, the parent or guardian accepts these Terms on behalf of the minor in accordance with the Data Protection Act No. 24 of 2019 and the Children Act No. 29 of 2022.
1.4 [Operator Name] reserves the right to modify, suspend, or discontinue any feature or service on the platform at any time with [Notice Period Amendments] advance notice for material changes. No compensation is payable for service interruptions resulting from maintenance, technical failures, or circumstances beyond the operator's control.
2. ACCEPTANCE OF TERMS
2.1 Your access to and use of [Website URL] constitutes your acceptance of these Terms of Service. Clicking 'I Agree', registering an account, placing an order, or continuing to browse after being presented with these Terms constitutes valid acceptance under Section 83P of the Kenya Information and Communications Act Cap. 411A.
2.2 [Operator Name] may amend these Terms at any time. Material changes will be notified by email or a prominent website notice at least [Notice Period Amendments] before taking effect. Continued use after the effective date of amendments constitutes acceptance of the revised Terms. If you do not accept the revised Terms, you may close your account before the effective date.
2.3 These Terms of Service are governed by and shall be construed in accordance with the laws of Kenya. They are subject to the Consumer Protection Act No. 46 of 2012 administered by the Competition Authority of Kenya (CAK). Any term that is unfair or contrary to Section 52 of the Consumer Protection Act is void to the extent of the inconsistency.
3. PERMITTED USE AND PROHIBITED CONDUCT
3.1 You may access and use [Website URL] for lawful personal or business purposes in accordance with these Terms.
3.2 The following conduct is strictly prohibited on this platform:
(a) Unauthorised access to any secure area, system, or database on or connected to this platform — an offence under Section 22 of the Computer Misuse and Cybercrimes Act No. 5 of 2018.
(b) Interception of data transmitted through or stored on the platform — an offence under Section 23 of the Computer Misuse and Cybercrimes Act No. 5 of 2018.
(c) Transmission of malicious code, viruses, or any software designed to disrupt or damage the platform — an offence under Section 26 of the Computer Misuse and Cybercrimes Act No. 5 of 2018.
(d) Online fraud, false representations, or phishing — offences under Section 27 of the Computer Misuse and Cybercrimes Act No. 5 of 2018.
(e) Posting content that infringes copyright under the Copyright Act Cap. 130 or trademark rights under the Trade Marks Act Cap. 506.
(f) Publishing content that constitutes hate speech, harassment, or incitement under the National Cohesion and Integration Act No. 12 of 2008 or the Penal Code Cap. 63.
(g) Circumventing or attempting to circumvent any security, access control, or payment system on the platform.
(h) Scraping, crawling, or systematically extracting data from the platform without [Operator Name]'s prior written consent.
3.3 [Operator Name] reserves the right to suspend or terminate any user account that breaches these Terms, without prior notice, and to report such conduct to the relevant authorities including the Directorate of Criminal Investigations (DCI) and the Communications Authority of Kenya.
4. INTELLECTUAL PROPERTY
4.1 All original content on [Website URL] — including text, graphics, software code, photographs, videos, data compilations, and the platform's look and feel — is the copyright of [Copyright Holder] under the Copyright Act Cap. 130 of the Laws of Kenya, administered by the Kenya Copyright Board (KECOBO).
4.2 [Operator Name] grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the platform content for personal, non-commercial purposes only. This licence does not include any right to: reproduce or distribute content; modify, adapt, or create derivative works; commercialise any content; or sub-licence any rights to third parties.
4.3 Any reproduction, distribution, modification, or commercial exploitation of platform content without [Operator Name]'s prior written consent constitutes copyright infringement under Section 35 of the Copyright Act Cap. 130 and may result in civil and criminal liability.
4.4 Where users submit content — reviews, comments, images, or other material — to the platform, the user grants [Operator Name] a worldwide, royalty-free, non-exclusive licence to use, display, moderate, and remove that content as necessary for the operation of the platform. The user retains ownership of their user-generated content.
5. USER ACCOUNTS AND SECURITY
5.1 Where account registration is required, you must provide accurate, current, and complete information. Providing false information constitutes a breach of these Terms and may be an offence under Section 27 of the Computer Misuse and Cybercrimes Act No. 5 of 2018.
5.2 You are responsible for maintaining the confidentiality of your account credentials and for all activities carried out under your account. You must notify [Operator Name] immediately at [Contact Email] if you suspect unauthorised access to your account.
5.3 [Operator Name] is not liable for any loss or damage arising from your failure to maintain the confidentiality of your credentials or to report unauthorised access promptly.
5.4 [Operator Name] may suspend or terminate any account that is used in breach of these Terms, that has been compromised, or that is involved in fraudulent activity, without prior notice.
6. LIMITATION OF LIABILITY
6.1 To the fullest extent permitted by Kenyan law, [Operator Name]'s total liability to any user arising from or in connection with these Terms or use of the platform shall not exceed [Liability Cap].
6.2 [Operator Name] shall not be liable for indirect, consequential, incidental, special, or punitive damages, including loss of profits, loss of data, or business interruption, arising from use of or inability to use the platform.
6.3 Nothing in these Terms excludes or limits [Operator Name]'s liability for: (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; or (c) any liability that cannot lawfully be excluded under the Consumer Protection Act No. 46 of 2012 or any other applicable Kenyan statute.
6.4 The platform is provided on an 'as is' and 'as available' basis. [Operator Name] makes no warranty that the platform will be uninterrupted, error-free, or free from viruses or other harmful components, except as required by the Consumer Protection Act No. 46 of 2012.
6.5 [Operator Name] is not responsible for the content of external websites linked to from this platform. Links to third-party sites are provided for convenience only and do not constitute an endorsement.
7. PRIVACY AND DATA PROTECTION
7.1 [Operator Name] processes personal data collected through [Website URL] in compliance with the Data Protection Act No. 24 of 2019, administered by the Office of the Data Protection Commissioner (ODPC). [Operator Name] is a data controller registered with the ODPC.
7.2 The collection, use, storage, sharing, and deletion of your personal data is governed by our Privacy Policy, which is incorporated into these Terms by reference and is accessible at [Website URL]/privacy-policy.
7.3 Under Section 26 of the Data Protection Act No. 24 of 2019, you have the right to: access your personal data; correct inaccurate data; object to processing; and request erasure of your data in specified circumstances. To exercise these rights, contact our Data Protection Officer at [DPO Contact].
7.4 Where the platform uses cookies or similar tracking technologies to collect personal data, our Cookie Policy (accessible at [Website URL]/cookie-policy) applies. Non-essential cookies are used only with your prior consent in accordance with ODPC guidelines.
7.5 Failure to comply with the Data Protection Act No. 24 of 2019 may result in fines of up to KES 5,000,000 or 1% of annual turnover under Section 65 of the Act. [Operator Name] takes all reasonable steps to protect user data against unauthorised access, disclosure, or loss.
8. PRICING AND VAT
8.1 All prices displayed on [Website URL] are in Kenya Shillings (KES). VAT registration status: [VAT Registered]. Where applicable, prices are clearly stated as inclusive or exclusive of Value Added Tax (VAT) at 16% in accordance with the Value Added Tax Act No. 35 of 2013 and the Consumer Protection Act No. 46 of 2012 Section 12 requirement for transparent pricing.
8.2 Digital marketplace supplies may be subject to VAT under the Value Added Tax (Digital Marketplace Supply) Regulations 2020, administered by the Kenya Revenue Authority (KRA).
9. DISPUTE RESOLUTION AND GOVERNING LAW
9.1 If you have a complaint about the platform or these Terms, please contact [Operator Name] at [Contact Email] in the first instance. We will endeavour to resolve your complaint within 14 working days.
9.2 Unresolved disputes shall be escalated to: [Dispute Resolution Method], conducted in the English language in [Governing County], Kenya.
9.3 Consumer complaints may also be directed to the Competition Authority of Kenya (CAK) under the Consumer Protection Act No. 46 of 2012.
9.4 These Terms of Service and any dispute or claim arising from or in connection with them shall be governed by the laws of Kenya and subject to the exclusive jurisdiction of the courts of [Governing County], Kenya.
By using [Website URL], you acknowledge that you have read, understood, and agreed to these Terms of Service as at [Effective Date].
[Operator Name] | [Physical Address] | [Contact Email]
What Is a Website Terms of Service (Kenya)?
A Website Terms of Service in Kenya documents the website terms of service in a form the parties and authorities can rely on. It defines the service scope, SLA, pricing, data-protection duties, and liability allocation between provider and customer.
The Computer Misuse and Cybercrimes Act No. 5 of 2018 makes it an offence under Section 22 to access computer systems without authorisation. A Kenya Website Terms of Service reinforces this by setting out the authorised scope of use, confirming that users who exceed those boundaries lose the operator's consent and thereby expose themselves to liability under the Act. Section 23 of the Computer Misuse and Cybercrimes Act No. 5 of 2018 further criminalises interception of data, while Section 27 addresses computer fraud — provisions that a well-drafted Terms of Service mirrors in its prohibited conduct clauses.
The Information and Communications Technology Authority (ICTA) of Kenya, established under the Kenya Information and Communications Act Cap. 411A, regulates telecommunications and online services. Operators of e-commerce platforms must comply with ICTA guidelines on electronic transactions, which require clear disclosure of business identity, terms of sale, and dispute resolution mechanisms. The Kenya Information and Communications Act Cap. 411A Section 83P recognises electronic contracts and electronic signatures as legally valid, confirming that a website user who clicks 'I Agree' or continues to use a site after being presented with the Terms of Service has entered into a binding agreement.
The Data Protection Act No. 24 of 2019, administered by the Office of the Data Protection Commissioner (ODPC), requires that any personal data collected through a website be processed lawfully, fairly, and transparently. A Kenya Website Terms of Service works alongside a Privacy Policy to disclose how data collected through the website is used, stored, and shared. Section 25 of the Data Protection Act No. 24 of 2019 lists the lawful bases for processing, and the Terms of Service should reference the operator's Privacy Policy where data handling terms are spelled out.
The Copyright Act Cap. 130, administered by the Kenya Copyright Board (KECOBO), protects original literary works, artistic works, and software code published on or through a website. A Website Terms of Service in Kenya includes an intellectual property clause asserting the operator's copyright in website content and establishing a licence to users for permitted uses, while prohibiting reproduction, distribution, or adaptation without consent. Under Section 26 of the Copyright Act Cap. 130, the copyright in works created by employees in the course of employment vests in the employer, making it important for platforms that rely on staff-generated content to assert this ownership in the Terms of Service.
The Kenya Revenue Authority (KRA) requires operators of digital marketplaces to register and account for Value Added Tax (VAT) on digital supplies under the Value Added Tax Act No. 35 of 2013 as amended by the Tax Laws (Amendment) Act 2020. A Website Terms of Service that includes a marketplace or paid subscription element should address the applicable taxes, confirming that prices displayed are inclusive or exclusive of VAT as required by the Consumer Protection Act No. 46 of 2012 which mandates transparent pricing.
When Do You Need a Website Terms of Service (Kenya)?
Website Terms of Service in Kenya is required any time an individual or entity operates a website, mobile application, or digital platform through which users access content, purchase goods, subscribe to services, or interact with the operator or other users.
A Website Terms of Service is needed when a Kenyan e-commerce business sells goods online. The Consumer Protection Act No. 46 of 2012 Section 12 requires suppliers engaged in electronic transactions to provide consumers with clear information about the supplier's identity, the goods or services offered, pricing, delivery terms, return policy, and dispute resolution options before the consumer is bound. Without a publicly accessible Terms of Service, the operator lacks the contractual framework to enforce payment obligations or disclaim liability for third-party seller conduct on a marketplace.
A Website Terms of Service is required when a fintech startup, mobile money operator, or digital lender regulated under the Central Bank of Kenya (Amendment) Act 2021 and the Digital Credit Providers Regulations 2022 provides services through a web or app interface. The Terms of Service defines the lending or payment relationship, sets out the borrower's obligations, and incorporates by reference the operator's regulatory disclosures.
A Website Terms of Service is needed when a media house, news platform, or blog publishes original content online and wishes to control reproduction and derivative use of that content under the Copyright Act Cap. 130. Without a clear Terms of Service, users may claim an implied licence to reproduce or adapt published material.
A Website Terms of Service is required when a Software-as-a-Service (SaaS) provider based in Kenya or serving Kenyan users licenses access to software through a web browser. The Terms of Service constitutes the end-user licence agreement (EULA), defining the scope of the licence, restrictions on reverse engineering, and the operator's liability for downtime or data loss.
A Website Terms of Service is needed when any platform collects user-generated content — reviews, comments, forum posts, images — and the operator needs to secure the right to moderate, display, or remove that content without incurring liability for defamation claims under the Defamation Act Cap. 36 or intellectual property infringement claims under the Copyright Act Cap. 130.
What to Include in Your Website Terms of Service (Kenya)
A Kenya Website Terms of Service compliant with the Consumer Protection Act No. 46 of 2012 and the Computer Misuse and Cybercrimes Act No. 5 of 2018 must contain the following essential elements.
Operator Identification: Full legal name of the website operator, business address, registration number from the Business Registration Service (BRS), and KRA PIN. Section 12 of the Consumer Protection Act No. 46 of 2012 requires electronic suppliers to identify themselves clearly. Contact email and phone number must be accessible on the platform.
Acceptance of Terms: A clear statement that using the website constitutes acceptance of the Terms of Service. Reference to the Kenya Information and Communications Act Cap. 411A Section 83P confirming that click-wrap or browse-wrap acceptance constitutes a valid electronic contract. The date the Terms were last updated must appear prominently.
Permitted Use and Prohibited Conduct: A positive statement of permitted uses and a list of prohibited acts, including but not limited to: unauthorised access to secure areas (Computer Misuse and Cybercrimes Act No. 5 of 2018 Section 22), transmission of malicious code (Section 26), online fraud (Section 27), posting content that infringes copyright under the Copyright Act Cap. 130, and harassment or hate speech prohibited under the National Cohesion and Integration Act No. 12 of 2008.
Intellectual Property: Assertion of the operator's copyright under the Copyright Act Cap. 130 in all original content on the platform. Grant of a limited, non-exclusive, non-transferable licence to users for personal, non-commercial access. Prohibition on reproduction, distribution, modification, or commercialisation without written consent from the Kenya Copyright Board (KECOBO)-registered owner.
User Accounts and Security: Obligations on users to maintain confidential passwords, notify the operator of unauthorised access, and accept responsibility for all activity under their account. Reference to the Data Protection Act No. 24 of 2019 and the operator's Privacy Policy for how account data is handled.
Limitation of Liability: Exclusion of consequential, indirect, or punitive damages to the extent permitted by the Consumer Protection Act No. 46 of 2012. The Act prohibits unfair contract terms under Section 52, so blanket exclusions of liability for death or personal injury caused by negligence are void. The limitation clause must be drafted to exclude only what Kenyan law permits.
Privacy and Data Protection: Cross-reference to the operator's Privacy Policy. Statement that data is processed in accordance with the Data Protection Act No. 24 of 2019 under the lawful basis specified in Section 25. Contact details for the operator's Data Protection Officer (DPO) where the operator is a data controller required to register with the Office of the Data Protection Commissioner (ODPC).
Dispute Resolution: Escalation procedure — internal complaint first, then mediation under the Consumer Protection Act No. 46 of 2012 through the Competition Authority of Kenya (CAK), then arbitration under the Arbitration Act No. 4 of 1995 before the Nairobi Centre for International Arbitration (NCIA), or litigation before the High Court of Kenya. Governing law: laws of Kenya.
Amendments: The operator's right to modify the Terms of Service with advance notice (minimum 14 days for material changes), and the user's right to terminate their account if they do not accept amended terms. The forms-legal.com Kenya Website Terms of Service template covers all mandatory Consumer Protection Act and Data Protection Act disclosure requirements in a single document.
Additional compliance elements for a Website Terms of Service (Kenya) used in Kenya include: Under the Companies Act No. 17 of 2015, the Registrar of Companies at the Office of the Attorney General maintains the register of Kenyan companies. Section 3 of the Law of Contract Act (Cap. 23) governs contractual obligations. The Competition Authority of Kenya (CAK) enforces the Competition Act No. 12 of 2010. The Kenya Revenue Authority (KRA) administers corporate tax under the Income Tax Act (Cap. 470). The High Court of Kenya has unlimited original jurisdiction under Article 165 of the Constitution of Kenya 2010. Forms-legal.com provides this template as a starting point for Kenya-compliant documentation.
Cite this page
Reference this free template in an article, syllabus, or research note:
Forms Legal. (2026). Website Terms of Service (Kenya) (Kenya) [Legal document template]. Forms Legal. https://forms-legal.com/kenya/business/policies/website-terms-of-service-kenya
"Website Terms of Service (Kenya) (Kenya)." Forms Legal, 2026, https://forms-legal.com/kenya/business/policies/website-terms-of-service-kenya.
@misc{formslegal-website-terms-of-service-kenya,
author = {{Forms Legal}},
title = {Website Terms of Service (Kenya) (Kenya)},
year = {2026},
howpublished = {\url{https://forms-legal.com/kenya/business/policies/website-terms-of-service-kenya}},
note = {Free legal document template}
}
Frequently Asked Questions
Website Terms of Service are legally enforceable in Kenya provided the user was given reasonable notice of the terms and an opportunity to review them before being bound. The Kenya Information and Communications Act Cap. 411A Section 83P recognises electronic contracts, and courts have applied standard contract formation principles — offer, acceptance, and consideration — to online agreements. Click-wrap agreements, where the user must tick a box confirming they have read and agreed to the Terms, provide the strongest evidence of acceptance. Browse-wrap agreements, where continued use of the site constitutes acceptance, are enforceable but weaker, particularly against consumers under the Consumer Protection Act No. 46 of 2012 Section 52, which voids unfair contract terms. To maximise enforceability, the Terms of Service should be written in plain language, be accessible from every page of the website, and be presented before any purchase or registration is completed. Courts applying Kenyan law will also scrutinise limitation of liability clauses for fairness under the Consumer Protection Act.
A Kenya Website Terms of Service must cross-reference the operator's Privacy Policy and state that personal data collected through the website is processed in compliance with the Data Protection Act No. 24 of 2019. The Terms should identify the operator as a data controller registered with the Office of the Data Protection Commissioner (ODPC) where applicable, provide contact details for the Data Protection Officer (DPO), and inform users of their rights under Section 26 of the Data Protection Act — including the rights to access, correct, and delete their personal data. Where cookies are used to collect personal data, the Terms of Service should reference the Cookie Policy and comply with the ODPC's guidelines on consent for non-essential cookies. Failure to comply with the Data Protection Act No. 24 of 2019 can result in fines of up to KES 5,000,000 or 1% of annual turnover under Section 65 of the Act.
No. A Kenya website operator cannot exclude all liability through the Terms of Service. The Consumer Protection Act No. 46 of 2012 Section 52 voids any contract term that unreasonably limits or excludes the supplier's liability for death or personal injury caused by negligence, or that imposes disproportionate obligations on the consumer. Terms that are excessively one-sided in favour of the supplier may be declared unfair and unenforceable by the Competition Authority of Kenya (CAK). An operator may, however, lawfully limit liability for indirect or consequential losses, disclaim liability for third-party content or external links, and cap total liability at the amount paid by the user in a specified period, provided these limitations are not contrary to the Act. The limitation clause should be specific, prominently displayed (not buried in fine print), and drafted by a legal practitioner familiar with Kenya consumer law to withstand scrutiny.
Yes. While it is technically possible to combine all policies in one document, the Data Protection Act No. 24 of 2019 and the Office of the Data Protection Commissioner (ODPC) guidelines recommend a standalone Privacy Policy that clearly and specifically addresses data collection, processing, storage, sharing, and user rights. Combining privacy disclosures within a general Terms of Service risks burying material information in a way that regulators and courts may find inadequate. The Consumer Protection Act No. 46 of 2012 Section 12 requires electronic suppliers to provide contract information — including cancellation rights and return policy — which is best addressed in a separate Terms of Service. Having separate documents also makes it easier to update each policy independently as laws or practices change, without needing to reissue the entire agreement. A Cookie Policy may be a third separate document or a section within the Privacy Policy.
The Computer Misuse and Cybercrimes Act No. 5 of 2018 criminalises a range of online conduct including unauthorised access to computer systems (Section 22), unauthorised interception of data (Section 23), data interference (Section 24), computer fraud (Section 27), and cyberstalking (Section 36). A Kenya Website Terms of Service reinforces these statutory prohibitions in the prohibited conduct clause by defining the scope of authorised access — if a user exceeds that scope, they lose the operator's consent and their actions may constitute a criminal offence under the Act. The Terms of Service also helps the operator demonstrate, in the event of a cyberattack or data breach, that the attacker's access was unauthorised. Operators should include in their Terms a clause requiring users to report security vulnerabilities responsibly, aligning with the ICTA's cybersecurity guidelines under the Kenya National Cybersecurity Strategy 2022–2027.
A Kenya website should review its Terms of Service at least annually and whenever there is a material change to the platform's features, business model, applicable law, or data processing practices. Recent significant legislative changes affecting website operators include the Data Protection Act No. 24 of 2019, the Computer Misuse and Cybercrimes Act No. 5 of 2018, and the Central Bank of Kenya (Amendment) Act 2021 for fintech operators. The Consumer Protection Act No. 46 of 2012 requires reasonable notice to consumers before material changes take effect — best practice is 14 to 30 days' advance notice via email or a prominent notice on the website. Where the platform is registered with the ODPC as a data controller, any change to data processing practices may also trigger a notification obligation to the ODPC under the Data Protection (General) Regulations 2021. A version history with dates should be maintained and prior versions archived.
This template is provided for informational purposes only and does not constitute legal advice. Laws vary by jurisdiction and change over time. Consult a qualified attorney for advice specific to your situation.Full disclaimer
Found an error? Let us knowRelated Documents
You may also find these documents useful:
Privacy Policy (Kenya)
A Kenya Privacy Policy compliant with the Data Protection Act No. 24 of 2019, covering data collection, processing, storage, and data subject rights as required by the Office of the Data Protection Commissioner.
Cookie Policy (Kenya)
A Kenya Cookie Policy disclosing the types of cookies used on a website, the purposes for their use, and users' rights under the Data Protection Act No. 24 of 2019, enforceable by the Office of the Data Protection Commissioner (ODPC).
Data Processing Agreement (Kenya)
A Kenya Data Processing Agreement between a data controller and data processor, compliant with the Data Protection Act No. 24 of 2019 s.45 and the Data Protection (General) Regulations 2021.