Privacy Policy
Draft for review. This document is a working policy draft and should be reviewed and approved by the service operator and Kenyan legal counsel before being relied upon for regulatory, app-store or third-party API submissions.
1. Scope
This policy describes the intended handling of personal information when you browse CampaignOS, create an account or submit a report and research enquiry. It is a working draft and must be checked against the complete production data flows, processors, retention schedules and security controls before final approval.
2. Information that may be processed
Depending on the feature you use, information may include account and organisation details, contact information, authentication and security records, support requests, and the name, phone number, email address, organisation, area of interest and message supplied in a report enquiry. Public election records and electoral statistics are presented separately from private account and enquiry information.
3. Why information is used
Information may be used to provide and secure the service, administer accounts, respond to support and report enquiries, maintain audit and operational records, prevent abuse, and meet applicable legal obligations. Enquiry contact details are used to respond to the specific enquiry; submitting an enquiry does not by itself enrol you in marketing communications.
4. Enquiry processing
When you submit a report enquiry, the details are stored in CampaignOS and an email notification may be sent to the service team's configured enquiry address. You are asked to consent to being contacted about the enquiry. Do not include sensitive personal information that is not necessary for the request.
5. Sharing and service providers
Information may be accessible to authorised personnel and service providers who support hosting, communications, security, email delivery or operation of CampaignOS, where needed for those purposes and subject to appropriate safeguards. This draft does not identify every current provider or international data-transfer arrangement; those must be confirmed in the final policy.
6. Retention and security
Personal information should be retained only for as long as necessary for the stated purpose, applicable legal requirements and legitimate operational needs, then securely deleted or anonymised where appropriate. Appropriate technical and organisational safeguards should be maintained. No online service can guarantee absolute security.
7. Your rights
Subject to applicable law, including the Kenya Data Protection Act, you may have rights to be informed, access your personal data, request correction or deletion, object to or restrict certain processing, and withdraw consent where processing relies on consent. You may contact us using the address below to make a request or raise a concern.
8. Children
CampaignOS is not designed to solicit personal information from children through public report-enquiry forms. If you believe a child has submitted personal information, contact us so the matter can be reviewed.
9. Changes
This policy may be revised as the service, its providers and its data practices change. The final published version should state its effective date and explain material changes.
10. Contact
For privacy questions or data-subject requests, contact cirizdigitalservices@gmail.com. You may also raise a complaint with the Office of the Data Protection Commissioner in Kenya.