CSK Logo

Loading...

How We Protect Your Information

Privacy Policy

The Compliance Society of Kenya (CSK) is committed to protecting the privacy and security of personal information entrusted to us by our members, applicants, and website visitors. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with applicable data protection laws and regulations in Kenya.

Effective Date: March 2026

1. Information We Collect

1.1 Personal Information

When you apply for membership or register on our platform, we collect:

  • Full name, title, and gender
  • National identification number and date of birth
  • Contact details (email address, mobile number, work and home phone)
  • Nationality and country of residence
  • Professional information (designation, institution, industry sector)
  • Educational background and qualifications
  • Passport photograph and identity documents
  • Payment and transaction information

1.2 Usage and Technical Information

When you visit our website, we may automatically collect:

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on our website
  • Referring website and navigation patterns

1.3 Communications

We collect information from your communications with us, including emails, contact form submissions, event registrations, and feedback provided to CSK.

2. How We Use Your Information

CSK uses your personal information for the following purposes:

  • Membership Administration: Processing applications, maintaining member records, and managing membership renewals
  • Professional Development: Providing access to events, training, mentorship, and professional resources
  • Communication: Sending updates, newsletters, event notifications, and important society announcements
  • Service Delivery: Facilitating participation in CSK programs, events, and initiatives
  • Compliance and Legal: Meeting regulatory requirements and protecting our legal rights
  • Improvement: Analyzing website usage to enhance user experience and service delivery
  • Authentication: Verifying identity and preventing fraudulent applications

3. Legal Basis for Processing

We process your personal data based on:

  • Consent: You have provided explicit consent for membership and communication
  • Contract Performance: Processing is necessary to fulfill our membership obligations
  • Legitimate Interest: Operating as a professional association and serving our members
  • Legal Obligation: Compliance with applicable laws and regulations

4. Information Sharing and Disclosure

CSK does not sell, rent, or trade your personal information. We may share limited information with:

  • Service Providers: Trusted third parties who assist in website hosting, payment processing, and email communications
  • Professional Partners: Training providers and event organizers, with your consent
  • Legal Authorities: When required by law or to protect our rights and safety
  • Governing Council: For membership review and governance purposes

All third parties are contractually obligated to maintain confidentiality and security of your data.

5. Data Security

CSK implements appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Secure server infrastructure with encryption
  • Access controls and authentication protocols
  • Regular security assessments and updates
  • Staff training on data protection practices
  • Confidentiality agreements with all personnel

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Membership records are maintained for the duration of active membership and for a reasonable period thereafter for administrative and legal purposes.

7. Your Rights

You have the right to:

  • Access: Request copies of your personal information held by CSK
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal data, subject to legal obligations
  • Restriction: Request limitation of processing in certain circumstances
  • Portability: Receive your data in a structured, commonly used format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the details provided below.

8. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance user experience, analyze website traffic, and improve functionality. You can control cookie preferences through your browser settings. However, disabling cookies may limit certain website features.

9. Third-Party Links

Our website may contain links to external websites operated by third parties. CSK is not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Policy

CSK reserves the right to update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify members of significant changes through email or website notifications. The updated policy will be posted on our website with the revised effective date.

11. Contact Us

If you have questions, concerns, or wish to exercise your data protection rights, please contact us:

Compliance Society of Kenya (CSK)

Email: info@compliancesociety.org

Phone: (+254) (0) 777 399 094

Address: CSK House, Riverside Drive, Nairobi

Acknowledgment

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.