Privacy Policy
Welcome to OpportunitiesforKenyans ("we", "us", or "our"). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have regarding your information when you use our website and related services (the "Services").
1. Information We Collect
We may collect the following categories of information:
- Account Information: Email address and authentication credentials when you register or log into the Services.
- Application Data: Personal details you provide via application forms, such as full name, phone number, national ID, county/sub-county/ward, KRA PIN, and uploaded files (e.g., ID photos, certificates).
- Usage Data: Technical and usage information such as IP address, device type, browser, pages visited, and timestamps.
- Communications: Any messages, support requests, or other communications you send us.
2. How We Use Your Information
We use the personal information for the following purposes:
- To create and manage your user account and authenticate access to the Services.
- To process, store and manage application submissions you make through our forms.
- To operate, maintain, and improve the Services, including analytics and troubleshooting.
- To communicate with you about account activity, service updates, and transactional notices.
- To comply with legal obligations and respond to lawful requests by public authorities.
3. Legal Bases for Processing (where applicable)
If you are located in a jurisdiction that requires us to identify a legal basis for processing (for example, the EU under the GDPR), we rely on one or more of the following:
- Contractual necessity: processing is necessary to provide the Services you requested (e.g., account creation, applications).
- Consent: where you have provided consent for certain processing activities (we will inform you when we rely on consent).
- Legitimate interests: to operate, secure, and improve our Services, where such interests are not overridden by your rights.
4. How We Share Your Information
We do not sell your personal information. We may share data in limited circumstances, including:
- Service providers: We use third-party providers, including our database provider, to host, store, and process data on our behalf. These providers act as data processors under our instructions.
- Legal requirements: If required by law, court order, or government request, or to protect the rights, property, or safety of users and the public.
- Business transfers: In connection with a merger, acquisition, or sale of assets, we may transfer information as part of that transaction.
5. Data Retention
We retain personal information only as long as necessary to fulfill the purposes described in this policy, to comply with legal obligations, or to resolve disputes. If you request deletion, we will comply unless retention is required by law or for legitimate business purposes.
6. Data Security
We implement administrative, technical, and physical safeguards designed to protect personal information. Measures include encrypted storage via our database provider, access controls, and secure transport (HTTPS). While we strive to secure your data, no system can guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have rights in relation to your personal data, such as:
- Accessing the data we hold about you.
- Requesting correction or deletion of inaccurate or unnecessary data.
- Objecting to or restricting processing where applicable.
- Withdrawing consent where processing is based on consent.
To exercise your rights, contact us using the details below. We will respond in accordance with applicable law.
8. Cookies and Tracking Technologies
We and our service providers may use cookies and similar technologies to provide, analyze, and improve the Services. You can control cookies through your browser settings; however, disabling cookies may affect your ability to use certain features.
9. Children’s Privacy
Our Services are not intended for children under 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will take steps to delete it.
10. International Transfers
Personal data may be processed in countries other than your own. By using the Services, you consent to the transfer, storage, and processing of data in other jurisdictions, including where our service providers operate.
11. Contact & Data Requests
If you have questions, wish to exercise your rights, or request deletion, please contact us:
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the "Last Updated" date. We encourage you to review this page periodically to stay informed about how we collect and use personal information.