Privacy
Privacy Notice
Last updated 29 August 2026
Who we are
The data controller is the campaign of Vincent Ochieng Ombaka, aspirant for Member of Parliament, Dagoretti North (“Pewa Change”, “we”). You can reach us at info@pewachange.ke or +254 100 540 540.
What we collect
- If you volunteer: your name, phone number, email if you give it, ward, the areas you can help with, your availability and any note you add.
- If you raise an issue (on the main site or a ward site): your name, phone number, email if you give it, ward, the category, location and description of the issue, and — on the ward sites — a photo if you choose to add one. Photos are re-saved by us before storage, which removes location and device data embedded by the camera, and are held unpublished until a staff member reviews them.
- Automatically: your IP address and browser type at the time of submission, kept only to detect abuse of the forms.
The ward maps use OpenStreetMap. Map images are fetched by our server and cached — your browser does not contact OpenStreetMap, and no map cookies are set.
Why we use it, and our lawful basis
- To contact you and coordinate volunteering — on the basis of your consent.
- To follow up on issues you raise — on the basis of your consent, and our legitimate interest in representing the constituency.
- To keep the forms free of spam and abuse — on the basis of our legitimate interest in a working website.
You can withdraw consent at any time by contacting us.
Who sees it, and who processes it
Submissions are seen only by campaign staff who need them. We use no third-party form, CRM or analytics service. We do not sell or rent your data. We may share an issue with a relevant public office if you have agreed to that, and we may be required to disclose data by law.
The campaign's website, database and email run on secure, cloud-based service providers that are contractually bound by European Union data-protection law (the GDPR) — a regime the Data Protection Act, 2019 recognises as offering protection equivalent to Kenya's. Messages you send to our WhatsApp line are additionally handled by WhatsApp.
Storage outside Kenya
Because these providers operate outside Kenya, your personal data is stored and processed outside Kenya. We rely on the European Union data-protection safeguards described above and on your consent, which you give when you tick the box and submit a form. The transfer is declared to the ODPC on our registration.
If you would rather your details were not held outside Kenya, please do not submit the form — contact us instead at info@pewachange.ke or +254 100 540 540.
How long we keep it
We keep volunteer records for the campaign period and about six months afterwards; issue reports for up to twelve months after they are resolved (longer if still open at the end of the campaign); then we delete them. Abuse-detection logs are kept only a few weeks. You can ask us to delete your data sooner.
Your rights
Under the Data Protection Act, 2019 you have the right to be informed, to access the data we hold about you, to have it corrected or deleted, to object to or restrict its use, and to data portability. To exercise any of these, email info@pewachange.ke.
Complaints
If you are not satisfied with how we have handled your data, you can complain to the Office of the Data Protection Commissioner, Kenya (odpc.go.ke).
Cookies
This site sets no advertising or analytics cookies. WordPress may set a session cookie only if you log in to the admin area.
Changes
If this notice changes we will post the updated version here.