Data Protection
Data Protection Notice
Introduction
We are committed to safeguarding your privacy and ensuring that your personal data is protected in compliance with the Data Protection Act, 2019 of Kenya. This notice outlines how we collect, use, store, and share your personal information, and your rights regarding your data.
1. Collection of Personal Data
We collect personal data that is necessary for the purposes of providing our services to you. This may include, but is not limited to:
- Full name
- Identification number (ID or passport)
- Contact details (phone number, email address, postal address)
- Financial information (bank details, payment information)
- Employment information
- Digital identifiers (IP address, device information)
2. Use of Personal Data
Your personal data may be used for the following purposes:
- Providing, personalizing, and improving our services
- Processing transactions and managing accounts
- Communicating with you regarding updates, promotions, and customer service
- Complying with legal and regulatory obligations
- Conducting market research and analysis
3. Sharing of Personal Data
We may share your personal data with third parties in the following circumstances:
- With service providers who assist in delivering our services
- With regulatory authorities or as required by law
- With partners or affiliates for joint marketing initiatives, under strict confidentiality agreements
- In the event of a business merger, acquisition, or sale, your data may be transferred to the new entity
4. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or destruction. These measures are regularly reviewed and updated to ensure the highest level of security.
5. Data Retention
Your personal data will be retained for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once your data is no longer needed, it will be securely deleted or anonymized.
6. Your Rights
Under the Data Protection Act, 2019, you have the following rights:
- Right to Access: You can request access to your personal data held by us.
- Right to Correction: You can request correction of inaccurate or incomplete data.
- Right to Deletion: You can request the deletion of your personal data, subject to legal and contractual obligations.
- Right to Restrict Processing: You can request the restriction of processing your data under certain circumstances.
- Right to Data Portability: You can request a copy of your personal data in a structured, commonly used format.
- Right to Object: You can object to the processing of your data for certain purposes, such as direct marketing.
7. Consent
By providing your personal data to us, you consent to the collection, use, and sharing of your information as described in this notice. You have the right to withdraw your consent at any time, subject to legal or contractual restrictions.
8. Changes to this Notice
We may update this Data Protection Notice from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website, and we encourage you to review this notice periodically.
9. Contact Information
If you have any questions, concerns, or requests regarding your personal data or this Data Protection Notice, please contact us at:
[Company Name]
[Physical Address]
[Email Address]
[Phone Number]
Data Protection Officer:
[Name and Contact Information, if applicable]