The Humanist Party of Kenya ("Humanist", "the Party") is committed to protecting the privacy, confidentiality, security and lawful use of personal data entrusted to the Party by its members, prospective members, supporters, officials, employees, volunteers, applicants, suppliers, visitors, website users and other persons who interact with the Party.
This Privacy and Data Protection Statement explains how Humanist collects, receives, uses, stores, protects, discloses, transfers and otherwise processes personal data.
The Party recognizes the constitutional right to privacy under Article 31 of the Constitution of Kenya, 2010, and is committed to ensuring that personal data is processed lawfully, fairly, transparently and responsibly.
Legal Framework: This Statement is made pursuant to and shall be interpreted consistently with applicable Kenyan law, including:
This Statement is intended to:
For purposes of applicable data-protection law, Humanist shall act as a data controller where it determines the purposes and means of processing personal data.
Where Humanist engages another organisation or person to process personal data on its behalf, that organisation or person may act as a data processor and shall be required to process personal data only in accordance with applicable law and the Party's instructions and contractual safeguards.
Humanist shall maintain appropriate internal responsibility for data protection and shall designate an appropriate officer or responsible person to coordinate privacy and data-protection compliance.
Depending on the relationship between the individual and the Party, Humanist may collect and process:
The Party may process information necessary for:
Membership of a political party necessarily involves information concerning political affiliation or adherence. Humanist recognizes that such information requires particular care and shall not process, disclose or publish it beyond what is legally authorized, reasonably necessary for legitimate Party functions, or otherwise lawfully permitted.
When individuals interact with the Party electronically, we may collect:
Humanist recognizes that certain categories of information constitute sensitive personal data under Kenyan law.
Enhanced Safeguards: Where the Party processes sensitive personal data, it shall apply enhanced safeguards and shall process such information only where a lawful basis exists and where the processing is necessary, proportionate and compatible with the purpose for which the information was collected.
The Party shall apply the principle of data minimization, meaning that only information reasonably necessary for the relevant purpose shall be collected.
The ODPC's registration framework specifically identifies categories including political opinion or adherence, religious or philosophical beliefs, health information, biometric information, marital and family information and other sensitive categories as requiring appropriate consideration.
Humanist may collect personal data:
Important: The Party shall not knowingly collect personal data through deception, unlawful coercion or fraudulent representation.
Humanist may process personal data for the following legitimate purposes:
The Party may process and submit information where required by law or by a competent regulatory authority, including the ORPP.
Where consent is required, the Party shall obtain appropriate consent before sending direct electronic marketing or other communications requiring consent.
Humanist shall process personal data only where there is a lawful basis. Depending on the circumstances, this may include:
The Party shall not rely on consent where another lawful basis is more appropriate.
Humanist recognizes that political-party membership information is subject to both political-party regulation and data-protection law.
The Party shall:
ORPP Integration: The ORPP states that party membership information is maintained through its Integrated Political Parties Management Information System (IPPMS), and that consent processes are incorporated into membership administration.
Humanist shall therefore treat the Party membership register as a controlled information resource and shall not make the complete membership register publicly available except where disclosure is expressly authorized or required by law.
Humanist shall collect only personal data that is:
The Party shall not request personal information merely because it may be useful in the future.
Humanist shall take reasonable steps to ensure that personal data is:
Members may request correction of inaccurate information.
Humanist shall retain personal data only for as long as reasonably necessary for:
At the expiry of the applicable retention period, personal data shall be securely deleted, anonymised or otherwise disposed of in accordance with the Party's records-retention procedures and applicable law.
Humanist shall implement appropriate technical and organizational measures to protect personal data against:
Security measures may include:
Access to sensitive membership information shall be restricted according to official responsibility and legitimate need.
Every Party official, employee, volunteer, agent, consultant, contractor and service provider who has access to personal data shall maintain confidentiality and shall use such information only for authorized purposes.
Unauthorized access, copying, disclosure, sale, transfer, publication or misuse of personal data may constitute a disciplinary matter and may also constitute a breach of applicable law.
Humanist shall not sell personal data.
Personal data may be disclosed to third parties only where legally permitted or required, including where disclosure is:
Where processors are engaged, Humanist shall require appropriate contractual and security safeguards.
Humanist shall not transfer personal data outside Kenya unless the transfer is permitted under applicable Kenyan law and appropriate safeguards are in place.
Where required, the Party shall ensure that appropriate safeguards, contractual arrangements, adequacy requirements or valid consent are in place before transferring personal data outside Kenya.
Note: The Data Protection Act contains specific requirements governing transfers of personal data outside Kenya.
Humanist may use cookies and similar technologies to:
Where cookies involve personal data or require consent under applicable law, appropriate notice and consent mechanisms shall be provided.
The Party shall not use cookies to collect excessive personal information.
Humanist shall exercise particular care when processing personal data relating to children.
Where processing children's data requires parental or guardian consent or other safeguards under applicable law, the Party shall implement the appropriate measures.
The Party shall not knowingly use children's personal information for political communication or targeted political purposes except where lawful, necessary and appropriately safeguarded.
Humanist recognizes the distinction between legitimate political communication and direct marketing.
The Party shall ensure that electronic communications and political communications involving personal data are undertaken in accordance with applicable law.
Where consent is required, the Party shall provide an appropriate consent mechanism.
Individuals shall be provided with a reasonable means of opting out of communications where applicable.
Humanist shall not subject a data subject to a decision based solely on automated processing where such decision produces legal or similarly significant effects, except where permitted by law and subject to applicable safeguards.
Where profiling or automated decision-making is undertaken, the Party shall provide appropriate information and safeguards required by law.
Humanist shall maintain procedures for identifying, investigating, containing and responding to personal-data breaches.
Where a breach occurs, the Party shall:
The Party shall maintain an internal data-breach register and incident-response procedure.
Subject to applicable legal limitations, a data subject has rights including:
ODPC Recognition: The ODPC expressly recognises these data-subject rights under the Kenyan data-protection framework.
A data subject may request confirmation as to whether Humanist holds personal data concerning them and, where applicable, request access to such information.
The Party shall respond within the timelines prescribed by applicable law.
Requests may be subject to reasonable verification of the identity of the requester to prevent unauthorised disclosure.
Where a member or other data subject believes that personal data held by Humanist is inaccurate, incomplete or misleading, they may request correction.
The Party shall take reasonable steps to verify and correct the information where the request is justified.
A data subject may object to certain processing of their personal data where permitted by law.
Humanist shall assess the objection and determine whether the processing may lawfully continue.
Where the objection relates to direct marketing, the Party shall respect the objection where required by law.
A data subject may request deletion of personal data where the law permits such deletion.
Important: The right to erasure is not absolute. Humanist may retain information where retention is required or permitted by law, including information necessary for:
Where applicable under Kenyan law, a data subject may request personal data in a structured, commonly used and machine-readable format and may request its transmission to another controller where the statutory conditions are satisfied.
Where processing is based on consent, the data subject may withdraw consent.
Withdrawal of consent shall not affect the lawfulness of processing undertaken before withdrawal.
Where withdrawal affects the Party's ability to provide a service or maintain a membership relationship, Humanist shall explain the consequences to the data subject.
A data subject may submit a privacy request to Humanist through the Party's designated data-protection contact.
A request should, where reasonably possible, contain:
The Party may request additional information where necessary to verify identity and protect against fraudulent requests.
Any person who believes that Humanist has unlawfully processed their personal data may first submit a complaint to the Party through its designated privacy contact.
The Party shall investigate and respond in accordance with its internal complaints procedure and applicable law.
A data subject retains the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) where permitted by law.
Where Humanist intends to undertake processing that is likely to result in a high risk to the rights and freedoms of individuals, the Party shall undertake an appropriate Data Protection Impact Assessment where required by law.
Particular attention shall be given to:
Where Humanist uses third parties for services such as:
The Party shall undertake reasonable due diligence and shall require appropriate confidentiality, security and data-protection safeguards.
Humanist shall maintain appropriate records concerning:
Humanist shall adopt a privacy-by-design and privacy-by-default approach.
Privacy and data protection shall be incorporated into the design and implementation of:
Party officials responsible for processing personal data shall receive appropriate data-protection training.
Party officials, members, agents and contractors shall not:
Humanist shall cooperate with the ORPP and other competent public authorities where required by law.
Such cooperation shall not remove the Party's responsibility to apply appropriate data-protection safeguards.
ORPP Access: The Party recognises that the ORPP membership register is subject to statutory access arrangements. ORPP states that members of the public may seek confirmation of their own membership status subject to the applicable legal framework.
Humanist may publish information about Party officials, candidates, spokespersons, activities and programmes where there is a lawful basis for doing so.
Before publication of photographs, videos, names, biographies or other personal information, the Party shall consider:
Where Humanist operates social-media accounts, personal information received through such platforms shall be handled responsibly.
The Party shall not intentionally publish personal information of members, supporters or members of the public without a lawful basis.
Individuals should also understand that social-media platforms operate under their own privacy policies and terms.
Humanist shall maintain appropriate evidence of compliance, including where applicable:
ODPC Registration: The ODPC states that registration of data controllers and processors is a statutory compliance requirement for applicable entities processing personal data in Kenya.
Humanist may amend this Statement from time to time to reflect:
The latest version shall be published through the Party's official communication channels.
Material changes shall be communicated to affected persons where required by law.
This Privacy and Data Protection Statement shall be governed by the laws of the Republic of Kenya.
Nothing in this Statement shall be interpreted as limiting a right or protection granted to a data subject under the Constitution, the Data Protection Act or any other applicable law.
For privacy, data-protection, access, correction, objection, deletion, consent or other data-related requests, please contact:
Data Protection / Privacy Office
Email: dataprotection@humanistpartykenya.co.ke
Telephone: +254 729 261 243
Postal Address: 17136-00100, Nairobi, Kenya
Physical Address: Kaka House - Right Wing, 6th Floor, Off Parkland Road, Westlands
Where the Party appoints a Data Protection Officer, the relevant DPO contact details shall be published here.
Data subjects may also contact the:
Nairobi, Kenya
The ODPC is responsible for regulating the processing of personal data and protecting the privacy rights of individuals in Kenya.
Humanist Party of Kenya is committed to protecting the dignity, privacy and personal information of every person whose data comes into its possession.
The Party shall process personal data responsibly, lawfully, fairly, transparently and securely and shall continually improve its privacy and information-security practices.
Approved by: National Executive Committee
Humanist Party of Kenya
Effective Date: 23 August 2026 | Review Date: 23 August 2027
Document Status: Approved Institutional Privacy and Data Protection Statement