Data Protection

Commitment

This website handles personal data in line with the Kenya Data Protection Act, 2019 and its regulations. Data is collected only for stated purposes, kept only as long as needed and protected with appropriate technical measures.

Technical and organisational measures

• All traffic uses HTTPS and security headers are applied to every response.
• Forms are protected by server-side validation, rate limiting, a hidden honeypot field and Cloudflare Turnstile verification.
• Enquiries are stored in a database accessible only to administrators who sign in with a password and a second factor.
• Administrator actions such as exports and status changes are recorded in an audit log.
• Automatic retention rules delete security records, email copies and archived enquiries after fixed periods.

Exercising your rights

To access, correct or delete your data, or to withdraw consent, email [email protected] and quote your enquiry reference number if you have one. Requests are answered within a reasonable time and in any case within the period set by law.

Complaints

If you are not satisfied with how your data is handled you can lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

Data breaches

If a personal data breach is likely to harm you, the affected people and the Data Commissioner will be notified as the law requires.