Inject Party Of Kenya :: Data Privacy Policy

Data Privacy Policy

Effective: May 13, 2025

At INJECT, we value the trust of our members, supporters, and users of the INJECT Party App and Website. This Data Privacy Policy outlines how we collect, process, store, and protect your personal data in compliance with Kenya’s Data Protection Act, 2019, and other applicable laws. Our commitment is to safeguard your privacy while delivering a seamless and engaging experience through the Website and App.

1. Scope

This policy applies to all users of the INJECT Party App and Website, including members, supporters, volunteers, and visitors, who interact with our App or Website or provide any data to INJECT. This policy covers data collected through our Website and App, any related services and offline interactions linked to our App and Website functionalities (e.g., event registrations).

2. Data Controller

INJECT, registered as a political party in Kenya, is the data controller responsible for your personal data. Contact details are provided in Section 16.

3. Data We Collect

Personal Information: Name, phone number, email address, national ID number, date of birth, gender, and age.
Physical address or location data: With consent, e.g., for event coordination.
Usage Data: Website and App interactions (e.g., pages viewed, features used), device information (e.g., IP address, device type, OS, browser type), cookies and similar technologies.
Voluntary Data: Responses to surveys, polls, feedback forms, event registrations, RSVPs, volunteer sign-ups, and contributions shared via the Website or App.
Sensitive Data: Political opinions or affiliations (inferred), biometric data (e.g., facial recognition for event check-ins, with consent).

4. How We Collect Data

Directly from You: When you register, complete forms, or use our Website or App.
Automatically: Through cookies, analytics tools, or device information.
From Third Parties: With consent or as permitted by law (e.g., event organizers, voter registry).

5. How We Use Your Information

To verify your identity and authenticate users
To communicate party policies, campaigns, and updates
To personalize content and improve user experience
To collect feedback and encourage political engagement
To analyze user interaction and improve services
To comply with legal and regulatory obligations

6. Data Sharing and Disclosure

INJECT does not sell your personal data. We may share your data under the following circumstances:

Outsource Service Providers:
- To facilitate our Service
- To provide the Service on our behalf
- To perform Service-related services
- To assist us in analyzing how our Service is used
Third parties have access to your Personal Information and must not disclose or use it for any other purpose.
Legal Requirements: We may share your information with authorities if required by law or to protect our rights.
Aggregated Data: De-identified data may be used for research or public reporting.

7. Data Security

We implement technical and organizational measures including:

Encryption of data in transit and at rest
Access controls for authorized personnel only
Regular security audits and assessments
Staff training on data protection

No system is entirely secure. In case of a breach, we will notify affected users and relevant authorities.

8. Your Data Protection Rights

Under the Data Protection Act, 2019, you have the following rights:

Right to Access: Request a copy of your data.
Right to Rectification: Correct inaccurate data.
Right to Erasure: Request data deletion.
Right to Restrict Processing: Limit how we process data.
Right to Object: Object to processing for direct marketing or other reasons.
Right to Data Portability: Get your data in a machine-readable format.
Right to Withdraw Consent: Withdraw your consent at any time.

To exercise your rights, contact our Data Protection Officer (see Section 16). Proof of identity may be requested.

9. Data Retention

We retain personal data only as long as necessary or as required by law.

Membership data: kept for membership duration and up to 7 years thereafter.
Event data: deleted within 6 months unless retained for further engagement.
De-identified data: retained indefinitely for analytics or research.

10. Cookies and Tracking Technologies

We use cookies, beacons, and similar technologies to enhance functionality and personalize content.

You can manage cookie preferences via browser or App settings. Essential cookies cannot be disabled.

11. International Data Transfers

If data is transferred outside Kenya, we ensure protection through legal safeguards, contracts, or consent.

12. Links to Other Sites

Our services may contain links to third-party sites. We are not responsible for their privacy practices.

13. Children’s Privacy

The App and Website are not intended for individuals under 18. If we learn of such data, we will delete it.

14. Changes to This Policy

We may update this policy and notify users of significant changes. Please review it periodically.

This policy is effective as of: 2025-05-13

15. Consent

By using the INJECT Party Website and App, you acknowledge this policy. Explicit consent will be requested where needed.

16. Contact Us

Data Protection Officer
INJECT PARTY OF KENYA
Email: injectpartyke@gmail.com
Address: INJECT HOUSE, Nairobi, Kenya