1. Legal Framework
   PESA Party processes personal data in accordance with the Kenya Data Protection Act, 2019 and related regulations, ensuring lawful, fair, and transparent processing.
2. Data Controller
   PESA Party acts as the Data Controller responsible for determining the purpose and means of processing personal data.
3. Data We Collect
   We collect membership and identification data including personal details, contact information, demographic data, voter information, and system-generated data such as IP address and device information.
4. Purpose of Processing
   Personal data is processed for membership registration, verification, communication, governance activities, compliance, and improvement of party services.
5. Lawful Basis for Processing
   Processing is based on consent, legal obligations, contractual necessity, and legitimate interests of the party and its members.
6. Data Security
   We implement strict security measures including encryption, access controls, audit logs, and system monitoring to protect personal data from unauthorized access or loss.
7. Data Sharing
   Data may be shared with authorized internal departments, service providers, auditors, or regulatory bodies where legally required or necessary for operations.
8. Data Retention
   Personal data is retained only for as long as necessary for membership management, legal compliance, or legitimate organizational purposes.
9. International Transfers
   Where data is transferred outside Kenya, appropriate safeguards are applied to ensure adequate protection in line with KDPA requirements.
10. Your Rights
    Members have the right to access, correct, delete, restrict processing, and withdraw consent regarding their personal data. Requests may be submitted through official contact channels.
11. Data Breach Handling
    In the event of a data breach, PESA Party will take immediate corrective action, assess impact, and notify relevant authorities and affected individuals where required by law.
12. Policy Updates
    This policy may be updated periodically. Any changes will be published on this page with the updated effective date.
13. Contact Information
    For any data protection inquiries, complaints, or requests, contact:
    Email: policies@pesaparty.or.ke

Effective Date: 28^th May 2026