Privacy Policy

Introduction

This Privacy Policy describes how the Nyabiosi Sydiney for MP 2027 Campaign ("we," "our," or "us") collects, uses, stores, and protects your personal information when you interact with our campaign platform for Nyaribari Chache Constituency.

We are committed to protecting your privacy and ensuring compliance with the Kenya Data Protection Act, 2019. By using our services, you consent to the collection and use of information in accordance with this policy.

Data Controller

Data Controller: Nyabiosi Sydiney Campaign
Constituency: Nyaribari Chache
Election Year: 2027
Contact: For privacy-related inquiries, please contact our campaign office.

Information We Collect

We collect the following types of personal information:

1. Personal Identification Information

• Full name (first name, middle name, last name)
• Date of birth
• Gender
• National ID number (if provided with consent)

2. Contact Information

• Phone number(s)
• Email address (if provided)
• Alternative phone number (if provided)

3. Location Information

• Ward
• Sub-location
• Village

4. Demographic Information

• Occupation
• Education level
• Voter registration status

5. Consent Information

• SMS communication consent
• Email communication consent
• WhatsApp communication consent
• Data collection consent
• MP support consent

6. Technical Information

• IP address (for security purposes)
• Browser type and version
• Device information
• Registration date and timestamps

How We Use Your Information

We use your personal information for the following purposes:

1. Campaign Communication

• Send campaign updates, announcements, and messages via SMS, email, or WhatsApp (only with your consent)
• Share information about campaign events, rallies, and activities
• Provide updates on policy positions and campaign progress

2. Campaign Management

• Organize and manage voter data by wards and demographics
• Create targeted communication segments
• Track campaign engagement and participation
• Generate reports and analytics for campaign planning

3. Legal and Compliance

• Comply with electoral laws and regulations
• Respond to legal requests and prevent fraud
• Maintain records as required by law

4. Service Improvement

• Improve our campaign platform and services
• Analyze usage patterns and demographics
• Ensure data accuracy and prevent duplicates

Legal Basis for Processing

We process your personal data based on the following legal grounds under the Kenya Data Protection Act, 2019:

• Consent: You have given explicit consent for the processing of your personal data
• Legitimate Interest: Processing is necessary for legitimate campaign activities
• Legal Obligation: Processing is necessary for compliance with legal obligations
• Public Interest: Processing is necessary for the exercise of democratic rights

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

1. Service Providers

We may share data with trusted service providers who assist us in:

• SMS gateway services (for sending SMS messages)
• Email service providers (for sending emails)
• WhatsApp Business API providers (for sending WhatsApp messages)
• Cloud hosting and data storage services

All service providers are contractually obligated to protect your data and use it only for specified purposes.

2. Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

3. Campaign Team

Authorized campaign staff and volunteers may access your information solely for campaign purposes and are bound by confidentiality agreements.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Storage: Data stored in secure, password-protected databases
• Regular Updates: Security measures are regularly reviewed and updated
• Staff Training: All staff are trained on data protection and privacy
• Audit Logs: All data access is logged for security monitoring

Note: While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to using industry-standard protections.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Active Campaign Period: Data is retained throughout the campaign period (2027 elections)
• Post-Election: Data may be retained for up to 2 years after the election for legal and administrative purposes
• Consent Withdrawal: If you withdraw consent, we will delete your data within 30 days, except where retention is required by law
• Legal Requirements: Some data may be retained longer if required by law or for legal proceedings

Your Rights Under the Data Protection Act

You have the following rights regarding your personal data:

Consent Management

We operate on an opt-in consent basis. You have the right to:

• Provide or withhold consent for data collection
• Provide or withhold consent for specific communication channels (SMS, Email, WhatsApp)
• Withdraw consent at any time
• Update your consent preferences

Withdrawing Consent: You can withdraw your consent at any time by contacting us. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Cookies and Tracking Technologies

Our platform may use cookies and similar tracking technologies to:

• Maintain your session when logged in
• Remember your preferences
• Analyze platform usage and improve services

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our platform.

Children's Privacy

Our services are intended for individuals who are eligible to vote (18 years and above). We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected information from a minor, we will take steps to delete such information promptly.

International Data Transfers

Your personal data is primarily stored and processed within Kenya. However, some service providers (such as cloud hosting services) may process data in other countries. In such cases, we ensure appropriate safeguards are in place to protect your data in accordance with the Kenya Data Protection Act, 2019.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our platform
• Updating the "Last Updated" date at the top of this page
• Sending notifications for significant changes (where appropriate)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact us:

Data Protection Commissioner

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the Data Protection Commissioner of Kenya: