1. Who We Are
   The PESA Party is the data controller responsible for your personal information. You can contact our Data Protection Officer at policies@pesaparty.or.ke.
2. Information We Collect
   We collect data you provide directly such as: Membership Number, Surname, Other Names, ID/Passport Number, Date of Birth, Postal Address, Mobile Number, Email, Sex, Ethnicity, PWD Status, PWD Number, Religion, Voter Status, County, Constituency, Ward, Interests, Affirmation, Pictures, Privacy Agreement. We also collect system-generated data such as: IP Address, Browser Type, Device Information.
3. Purpose of Collection
   Your information is used to manage membership, verify eligibility, communicate party updates, and improve our services.
4. Legal Basis
   Processing is done under the Kenya Data Protection Act (KDPA) and includes consent, contractual obligations, legal requirements, and legitimate interests.
5. Cookies & Tracking
   We use cookies to improve site functionality, remember preferences, ensure security, and conduct analytics.
6. Sharing of Data
   Personal data may be shared with service providers, regulators, auditors, or internal PESA Party bodies strictly for legitimate purposes.
7. Data Retention
   We retain personal data only as long as necessary for membership management, legal compliance, or service improvement.
8. Security Measures
   We employ encryption, access controls, audit logs, and vendor security checks to protect your data.
9. Your Rights
   You have the right to access, correct, update, delete, or restrict the processing of your personal data, as well as withdraw your consent where applicable. You may also raise a complaint regarding how your information is handled. To exercise any of these rights or submit a concern, please contact us at policies@pesaparty.or.ke.
10. Children
    Membership is only open to persons 18 years and older. We do not knowingly collect data from minors.
11. Automated Decisions
    PESA Party may perform limited automated checks for duplicate records or eligibility verification, but final decisions are reviewed manually.
12. International Transfers
    Any transfer of personal data outside Kenya is subject to safeguards consistent with the KDPA.
13. Third-Party Links
    Our website may contain links to external sites. We are not responsible for the privacy practices of those sites.
14. Policy Updates
    We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or member needs. Members may be notified of significant updates and will have an opportunity to review proposed changes, provide feedback, and participate in consultations where applicable. The latest approved version will always be available on this page together with its effective date.
15. Contact Information
    For questions about this privacy policy or your personal data, contact:
    Email: policies@pesaparty.or.ke

Effective Date: 1^st December 2025