Kisumu National Polytechnic is committed to protecting the privacy and security of personal data entrusted to us. This statement outlines how we collect, use, store, and safeguard information in compliance with the Kenya Data Protection Act, 2019 and applicable institutional policies.

1. Scope of Application

This privacy statement applies to:

• Visitors to our official website and online platforms.
• Current and former students, employees, contractors, and service providers.
• Users of institutional systems, including management information systems, e-learning platforms, and social media channels.

2. Data Controller

Kisumu National Polytechnic acts as the data controller, determining how personal data is processed. For inquiries, contact: P.O. Box [Insert Postal Address], Kisumu, Kenya Tel: [Insert Polytechnic Contact Number] Email: [Insert Official ICT/Legal Office Email]

3. Categories of Data Collected

We may collect and process the following types of data:

• Personal details: name, address, date of birth, contact information.
• Academic and employment records: student registration details, staff job history, performance records.
• Demographic information: gender, marital status, nationality.
• Biometric and identification data: signatures, photos, biometric identifiers, national ID numbers.
• Sensitive information: health, disability status, ethnicity, religion (processed under stricter safeguards).
• Technical data: IP addresses, browser/device information, online behavior, cookies.

4. Purpose of Data Collection

Your data is collected and processed for legitimate purposes, including:

• Delivering and improving academic and administrative services.
• Managing employment and contractual obligations.
• Ensuring compliance with legal and regulatory requirements.
• Facilitating communication, surveys, and institutional research.
• Enhancing user experience on our digital platforms.

5. Safeguarding and Security

We employ organizational, technical, and administrative measures to protect personal data against unauthorized access, theft, or disclosure. While no system is entirely foolproof, Kisumu National Polytechnic is committed to continuous improvement of its data protection practices.

6. Cookies and Online Tracking

Our website may use cookies to analyze web traffic and customize user experience. Cookies do not grant access to your computer or personal files. You may disable cookies through your browser settings.

7. Data Sharing and Disclosure

Personal data may be shared with authorized third parties for service provision (e.g., payment processing, IT support) or as required by law. Any cross-border data transfers will comply with applicable legal safeguards.

8. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, in line with statutory and institutional requirements.

9. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Information and transparency.
• Access to your personal data.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”).
• Restriction of processing.
• Data portability.
• Object to processing.
• Withdraw consent at any time.

Requests to exercise these rights may be directed to the Polytechnic’s Data Protection Office on Email: dataprotection@kisumupoly.ac.ke

10. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with the data protection officer on email: dataprotection@kisumupoly.ac.ke or with the Office of the Data Protection Commissioner (ODPC), Kenya on email: info@odpc.go.ke or https://cie.odpc.go.ke/Complaint