1. Introduction
The Nyandarua County Assembly is committed to protecting the personal data of all individuals who interact with the Assembly—whether through this website, physical offices, or other communication channels. This policy outlines how personal data is collected, used, stored, and protected in compliance with the Data Protection Act, 2019 (Kenya).
2. Scope
This policy applies to all personal data collected and processed by the Assembly from:
- Members of the public
- County Assembly staff
- Elected Members of the County Assembly (MCAs)
- Website users and subscribers
- Service providers and contractors
3. What Personal Data We Collect
The Assembly may collect the following types of personal information:
- Name and contact details (phone number, email address)
- National Identification Number (where required)
- Ward or constituency details
- Communication or submission content (e.g., petitions, public participation responses)
- Website usage data (e.g., IP address, browser type)
4. How We Collect Your Data
We collect personal data through:
- Online forms on our website
- Email or telephone correspondence
- Public forums and participation events
- Tender or service provider application processes
- Website cookies and analytics tools
5. Purpose of Data Collection
The Assembly collects personal data for the following purposes:
- To respond to public inquiries, petitions, and feedback
- To facilitate public participation and stakeholder engagement
- To manage administrative functions and service delivery
- To comply with legal or regulatory requirements
- To improve website functionality and user experience
6. Lawful Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent from the data subject
- Compliance with a legal obligation
- Performance of a public task
- Legitimate interest pursued by the Assembly
7. How We Protect Your Data
We take data protection seriously and implement appropriate technical and organizational safeguards to:
- Prevent unauthorized access, alteration, or disclosure
- Ensure data integrity and confidentiality
- Limit access to personal data to authorized personnel only
8. Data Sharing and Disclosure
We do not sell or share personal data with third parties unless:
- Required by law or court order
- Required for the performance of official duties
- Necessary to respond to a public query or service request with consent
Third-party service providers engaged by the Assembly are required to adhere to data protection standards and confidentiality obligations.
9. Data Retention
Personal data is retained only as long as necessary for the purpose it was collected, or as required by law, after which it is securely deleted or anonymized.
10. Your Data Rights
Under the Data Protection Act, individuals have the right to:
- Access their personal data
- Correct or update their personal data
- Request erasure of personal data
- Withdraw consent where applicable
- Object to processing under certain conditions
To exercise any of these rights, contact us using the details provided in the Contact Us section of the website.
11. Use of Cookies
The website may use cookies for functionality, analytics, or preference settings. Users may control cookie preferences through their browser settings. For more details, refer to our Cookies Policy.
12. Policy Updates
This policy may be updated from time to time in line with legal or operational requirements. Any changes will be posted on this page with the date of revision.
13. Contact Information
For questions or concerns regarding this policy or your personal data, please contact:
The Clerk, Nyandarua County Assembly
County Assembly Chambers, Ol’Kalou
Email: clerk@nyandaruaassembly.go.ke
Phone: +254 743 079 333