Privacy
Privacy Notice
Draft · not yet in force
Who we are
The data controller is the campaign of Vincent Ochieng Ombaka, aspirant for Member of Parliament, Dagoretti North (“Pewa Change”, “we”). You can reach us at info@pewachange.ke or +254 100 540 540.
What we collect
- If you volunteer: your name, phone number, email if you give it, ward, the areas you can help with, your availability and any note you add.
- If you raise an issue (on the main site or a ward site): your name, phone number, email if you give it, ward, the category, location and description of the issue, and — on the ward sites — a photo if you choose to add one. Photos are re-saved by us before storage, which removes location and device data embedded by the camera, and are held unpublished until a staff member reviews them.
- Automatically: your IP address and browser type at the time of submission, kept only to detect abuse of the forms.
The ward maps use OpenStreetMap. Map images are fetched by our server and cached — your browser does not contact OpenStreetMap, and no map cookies are set.
Why we use it, and our lawful basis
- To contact you and coordinate volunteering — on the basis of your consent.
- To follow up on issues you raise — on the basis of your consent, and our legitimate interest in representing the constituency.
- To keep the forms free of spam and abuse — on the basis of our legitimate interest in a working website.
You can withdraw consent at any time by contacting us.
Who sees it, and who processes it
Submissions are seen only by campaign staff who need them. We use no third-party form, CRM or analytics service. We do not sell or rent your data. We may share an issue with a relevant public office if you have agreed to that, and we may be required to disclose data by law.
Two service providers process personal data on our behalf, as data processors:
- Contabo GmbH — hosts the campaign's server, on which the website database and your submissions are stored.
- Google (Google Workspace) — runs our
info@pewachange.keemail, so a copy of each submission reaches us by email.
Messages you send to our WhatsApp line are additionally handled by WhatsApp (Meta).
Where it is held, and transfer outside Kenya
The campaign's server is located in France, in the European Union. Google Workspace and WhatsApp process data in the EU and the United States. So your personal data is stored and processed outside Kenya.
Under the Data Protection Act, 2019 we may transfer your data outside Kenya where there are appropriate safeguards and you have consented. The safeguards we rely on are the EU's data-protection regime (the GDPR), which provides protection substantially equivalent to Kenya's law, and Google's standard contractual clauses. The lawful basis for the transfer is your consent, which you give when you tick the box and submit a form. These transfers are declared to the ODPC on our registration.
If you would prefer that your details are not transferred outside Kenya, please do not submit the form — contact us instead at info@pewachange.ke or +254 100 540 540.
How long we keep it
We keep volunteer and issue records for the duration of the campaign and for a reasonable period afterwards, then delete them. Abuse-detection logs are kept for a short period only. (Specific retention periods to be set on legal advice.)
Your rights
Under the Data Protection Act, 2019 you have the right to be informed, to access the data we hold about you, to have it corrected or deleted, to object to or restrict its use, and to data portability. To exercise any of these, email info@pewachange.ke.
Complaints
If you are not satisfied with how we have handled your data, you can complain to the Office of the Data Protection Commissioner, Kenya (odpc.go.ke).
Cookies
This site sets no advertising or analytics cookies. WordPress may set a session cookie only if you log in to the admin area.
Changes
If this notice changes we will post the updated version here.