Legal
Data Protection Policy
Last updated: January 2025
Kenya Data Protection Act, 2019 Compliance. KCPF is committed to protecting the personal data of our members, website visitors, and service users in accordance with the Kenya Data Protection Act, 2019 and its regulations.
1. Data Controller
The Kenya Christian Professionals Forum (KCPF) is the data controller responsible for your personal data. Our registered office is in Nairobi, Kenya. You may contact our Data Protection Officer at dpo@kcpf.or.ke.
2. Data We Collect
We collect the following categories of personal data: • Identity data: full name, date of birth, national ID number • Contact data: phone number, email address, physical address • Professional data: profession, employer, professional qualifications • Payment data: Mpesa transaction references (we do not store card numbers) • Location data: constituency, ward, and polling station • Technical data: IP address, browser type, pages visited on our website • Communications: messages sent to us via contact forms or email
3. How We Use Your Data
We process your personal data for the following purposes: • To register and manage your KCPF membership • To process payments and issue receipts • To communicate KCPF news, events, and updates • To provide CCDRC services you have requested • To comply with legal and regulatory obligations • To improve our website and services • To compile anonymised statistics about our membership
4. Legal Basis for Processing
We process your data on the following legal bases: (a) Performance of a contract — to fulfil your membership agreement; (b) Legal obligation — to comply with applicable law; (c) Legitimate interests — to operate and improve our services; (d) Consent — where you have given explicit consent, which you may withdraw at any time.
5. Data Sharing
We do not sell or rent your personal data to third parties. We may share your data with: service providers who process data on our behalf (e.g. payment processors, cloud hosting); regulatory authorities when required by law; other KCPF members only where you have consented to appear in the professional directory.
6. Data Retention
We retain your personal data for as long as your membership is active and for a period of seven (7) years thereafter, in accordance with legal requirements. Payment records are retained for seven years for tax and audit purposes. You may request deletion of your data subject to applicable legal requirements.
7. Your Rights
Under the Kenya Data Protection Act, you have the right to: • Access your personal data • Correct inaccurate or incomplete data • Delete your data (right to be forgotten) • Object to processing • Withdraw consent at any time • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) To exercise any of these rights, contact us at dpo@kcpf.or.ke.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted data transmission, access controls, and regular security reviews.
9. Contact Us
For any data protection queries, contact our Data Protection Officer: dpo@kcpf.or.ke | Kenya Christian Professionals Forum, Nairobi, Kenya.