🛡️ Privacy Policy: Clean Alliance Party of Kenya (CAP-K)
1. Introduction The Clean Alliance Party of Kenya (hereinafter “CAP-K,” “the Party,” “we,” “us,” or “our”) is committed to protecting the privacy and sensitive personal data of our members, supporters, and website visitors. This policy explains how we collect, process, store, and protect your information in accordance with the Kenya Data Protection Act (2019) and the General Data Protection Regulation (GDPR) standards.
2. Data Controller and Data Protection Officer CAP-K acts as the Data Controller. We have appointed a Data Protection Officer (DPO) to oversee compliance.
Head Office: [Insert Physical Address in Nairobi/Kenya]
3. Types of Data We Collect
Identity Data: Full name, National ID/Passport number, date of birth, and gender.
Contact Data: Mobile number, email address, and physical/postal address.
Sensitive Personal Data: Under Kenyan law, political opinions and party affiliations are sensitive data. We collect this only when you voluntarily join the party or participate in internal polls.
Financial Data: Details required to process membership dues or donations via M-Pesa or bank transfers.
Technical Data: IP address, browser type, and navigation paths on our website.
4. How We Use Your Data
Statutory Compliance: To maintain the official party register as required by the Office of the Registrar of Political Parties (ORPP).
Mobilization: To send SMS/email updates regarding party rallies, manifestos, and voting information.
Engagement: To process your membership applications and issue membership cards.
Research: To analyze demographic trends to better shape CAP-K policies and outreach programs.
5. Legal Basis for Processing We process your data under the following legal grounds:
Consent: Explicit permission granted by you (e.g., ticking a “Subscribe” box).
Contract: Necessary steps to manage your membership agreement.
Legal Obligation: Compliance with the Political Parties Act.
Public Interest: Carrying out legitimate activities of a political organization.
6. Data Sharing and Disclosure We do not sell or rent your data to third parties. We only share data with:
Government Agencies: The ORPP and the Independent Electoral and Boundaries Commission (IEBC) as required by law.
Service Providers: Secure third-party tools for SMS broadcasting or cloud hosting (subject to strict confidentiality agreements).
7. Data Security and Retention
Security: We use SSL encryption, firewalls, and restricted database access to prevent unauthorized breaches.
Retention: Membership data is kept for the duration of your membership plus 7 years post-resignation to comply with financial and legal audit requirements.
8. Your Rights as a Data Subject You have the right to:
Access: Request a copy of the data we hold about you.
Correction: Update inaccurate or incomplete information.
Erasure: Request that we delete your data (subject to statutory retention laws).
Portability: Request your data in a structured, machine-readable format.
Object: Opt-out of any marketing or mobilization communications.