Hekima Alliance Party (HAPA) Data Privacy Statement

1. Introduction

Your data will be securely stored and used only for lawful purposes in accordance with Kenya’s Data Protection Act, 2019.

The Hekima Alliance Party (HAPA) is committed to safeguarding the privacy, confidentiality, and integrity of personal information entrusted to us. This Data Privacy Statement outlines our practices for collecting, processing, storing, and disclosing personal data, in compliance with Kenya’s Data Protection Act, 2019, and other applicable laws. We uphold privacy as a fundamental right, adhering to principles of lawfulness, fairness, and transparency.

2. Scope

This statement applies to all personal data collected, processed, and stored by HAPA as a political party. It covers interactions with members, supporters, volunteers, employees, partners, and other individuals, whether through digital platforms, events, forms, verbal communication, or other lawful channels.

3. Collection of Personal Information

HAPA collects personal data essential to its mission and legal obligations, including:

• Firstname, Other Names
• ID/Passport Number
• County, Constituency and Ward.
• Date Of Birth
• Phone Number
• Sex/Gender
• Ethnicity
• Religion
• Email Address (Optional)s
• Postal Address(Optional)
• Physical Address
• Special Interest Group (SIG) (Optional)

Data is gathered via membership forms, digital platforms, events, surveys, direct interactions, or lawful third-party and public sources.

4. Purpose of Data Collection

HAPA uses personal data solely for legitimate purposes, such as:

• Managing membership and participation
• Facilitating voter outreach, civic education, and political engagement
• Communicating with members, supporters, and stakeholders
• Organizing events, campaigns, and mobilization efforts
• Ensuring compliance with electoral and legal requirements
• Enhancing party operations, strategy, and policy development
• Conducting research, analytics, and opinion polling
• Promoting inclusive participation, including youth and special interest groups

Data will not be used beyond these purposes without explicit consent, unless required by law.

5. Data Security and Protection Measures

HAPA implements robust safeguards to protect personal data, including:

• Restricted access to authorized personnel only
• Encryption and secure digital storage
• Regular security audits and risk assessments
• Data minimization and privacy-by-design principles
• Secure disposal of obsolete data
• Staff training on data protection

These measures prevent unauthorized access, loss, alteration, or destruction of personal information.

6. Data Sharing and Disclosure

HAPA does not sell, rent, or share personal data for commercial purposes. Data may be shared in these cases:

• Legal Compliance: When required by law, court order, or regulators
• Authorized Third Parties: With trusted partners (e.g., IT providers, election monitors) under confidentiality agreements
• Government Agencies: To meet electoral or political party regulations
• With Consent: Where individuals explicitly authorize sharing
• Electoral Transparency: As mandated by the Political Parties Act

7. Retention of Personal Information

Personal data is retained only as long as necessary for its intended purpose or as required by law. Retention periods vary by data type and legal obligations. Expired data is securely deleted, anonymized, or archived as appropriate.

8. Individual Rights

Under Kenya’s Data Protection Act, individuals have the following rights:

• Access: View personal data held by HAPA
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion, subject to legal limits
• Object: Withdraw consent to processing where applicable
• Portability: Request data transfer to another entity
• Restriction: Limit processing in specific cases
• Complain: Report violations to the Office of the Data Protection Commissioner (ODPC)

To exercise these rights, contact us at:

• Phone: +254 790 987 149
• Email: info@hekimalliance.org
• Address: Voi Town, Taita Taveta County, Kenya.

9. Use of Images, Videos, and Audio Recordings

HAPA may capture and use images, videos, or audio during events and activities for documentation, publicity, and advocacy. Participation in HAPA events implies consent to such use, including on social media, websites, or other official channels.

Guidelines:

• Media is used only for non-commercial, party-related purposes.
• Individuals objecting to recording should notify HAPA officials during events; reasonable efforts will accommodate preferences.
• HAPA is not liable for unauthorized third-party use of media beyond its control.
• Requests to remove specific media from HAPA platforms can be submitted via email for review.

10. Updates to this Privacy Statement

HAPA may revise this statement to reflect changes in laws, operations, or best practices. The latest version will be posted at www.HAPA.co.ke.

11. Compliance with International Standards

Where relevant, HAPA aligns with global data protection frameworks, such as the General Data Protection Regulation (GDPR) and the African Union Convention on Cyber Security and Personal Data Protection.

12. Effective Date

This Data Privacy Statement is effective as of 9th April 2024.

13. Additional Information

Visit www.hekimalliance.org for more details and references.

By engaging with HAPA and providing personal information, you acknowledge and consent to the terms of this Data Privacy Statement. For concerns or disagreement, contact us or refrain from sharing your data.