Privacy Policy & Data Protection

This campaign portal is operated by CypressIQ Technologies Limited on behalf of the Candidate Campaign Secretariat. We act as joint data controllers committed to safeguarding the personal records and privacy rights of voters, volunteers, donors, and grassroots supporters.

We only collect personal information that you voluntarily provide to us when engaging with the campaign portal:

• Volunteer Registrations: Full name, verified email address, mobile phone number, county/ward location, preferred volunteer role, and skills inventory.
• Citizen Dialogue & Inquiries: Contact messages, policy inquiries, feedback submissions, and baraza hosting requests.
• Voluntary Financial Contributions / Pledges: Confirmation references, pledge tier amounts, and transaction codes (we never store banking PINs or M-Pesa secrets).
• Technical Device Information: Anonymized browser version, device category, and IP address for defensive firewall security and spam mitigation.

Under Section 30 of the Kenya Data Protection Act 2019 and Article 6 of the General Data Protection Regulation (GDPR), all personal data is collected strictly on the basis of explicit data subject consent and the legitimate civic interest of democratic participation and voter mobilization.

We prioritize privacy by design. Our cookie usage is categorized into:

All traffic between your browser and our servers is secured via 256-bit TLS/HTTPS encryption. We enforce Strict-Transport-Security (HSTS), rate-limiting firewall barriers, honeypot spam protection, and restricted role-based administrative access to protect personal records from unauthorized access, breach, or disclosure.

We do not sell, rent, or trade supporter personal data to commercial advertisers, brokers, or unrelated entities. Personal details are shared only with vetted operational processors (such as transactional SMS/email dispatchers) strictly to execute campaign communications on our direct instruction.

* Digital endorsements, volunteer signups, and community pledges recorded on this campaign portal represent expressions of civic support and do not constitute official statutory voter registration under the Independent Electoral and Boundaries Commission (IEBC).

In accordance with the Kenya Data Protection Act 2019, you retain full rights over your data, including:

• The right to be informed of how your data is utilized.
• The right to access and receive a copy of your personal data held by us.
• The right to request immediate rectification of inaccurate or outdated information.
• The right to request complete deletion (erasure) of your records from our systems at any time.

To exercise any of these rights, email our Data Protection Officer at privacy@itikia.app or contact info@cypressiq.co.ke. Requests are processed within 7 business days.