Updated on 28th July, 2022

DATA PROTECTION AND PRIVACY POLICY

Recent concerns about the security of personal data stored in institutions have led to Governments enacting data protection regulations. In 2018 the European Union (EU) operationalized the General Data Protection Regulations (GDPR) that govern how companies handle personal data. Consequently, in 2019 Kenya enacted its own Data Protection Act (the “Act”) and in 2021 regularized the Data Protection Regulations. The regulations seek to protect the privacy of individuals by enforcing responsible processing of personal data.

Pstudioh is committed to complying with all relevant Kenyan legislation and applicable global legislations. Pstudioh recognizes that the protection of individuals through lawful, legitimate, and responsible processing and use of their personal data is a fundamental human right. Consequently, we have enacted this Data Protection and Privacy Policy (the “Policy”).

This policy applies to your use of Pstudioh (hereinafter referred to as the “Site”). This Policy sets out how we collect, store, guard, share and use any personal data that we may collect from you when you use or otherwise interact with the Platform or the services offered through our Sites.

This policy shall apply to all processing of all personal data regardless of the manner and form in which it is collected or stored.

For purposes of this policy;

Account” means the account you create when registering as a user on the Site to enable you access some of the Services;
"Consent" means any manifestation of express, unequivocal, free, specific and informed indication of the data subject's wishes by a statement or by a clear affirmative action, signifying agreement to the processing of personal data relating to the data subject;
"Data" means information which is;

Data subject” means any identified or identifiable natural person whose data is the subject of personal data, which in this case means you;
Personal data” means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
"Processing" means any operation or sets of operations which is performed on personal data or on sets of personal data whether or not by automated means, like: Services” means such services made available, accessed, published or otherwise offered through the Site.
"Site" means Pstudioh’s website, application, or any other platform hosted by Pstudioh.

The following principles will guide Pstudioh in handling personal data. Personal data will be:

  1. Processed lawfully, fairly and in a transparent manner in accordance with the right to privacy of the data subject;
  2. Collected only for specified, explicit, specified and legitimate purposes and not further processed in a manner incompatible with those purposes. By using the Site, you consent to your personal data being used for the purposes listed hereunder and connected purposes;
  3. Adequate, relevant, limited to what is necessary in relation to the purposes for which it is collected/ to be processed;
  4. Collected only where a valid explanation is provided whenever information relating to family or private affairs is required;
  5. Accurate and, where necessary, kept up to date, with every reasonable step being taken to ensure that any inaccurate personal data is erased or rectified without delay;
  6. Not kept in a form that permits identification of the data subjects for longer than is necessary for the purposes for which it was collected;
  7. Stored securely in accordance with the right to privacy of the data subject to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed;
  8. Not transferred outside Kenya, unless there is proof of adequate data protection safeguards or consent from the data subject;
  9. Retained for as long as reasonably necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Your personal data may be retained for a longer period where there has been a complaint or there is a prospect of litigation with respect to your use of the Site; and
  10. Safeguarded and not shared with any unauthorized third parties unless:
    • Disclosure is required by, under any written law, or by an order of the court.
    • It is a necessity in completing vital company processes, where the requester of the data has a binding confidentiality agreement with the company.
    • If it is necessary for national security or public interest.
You, as the data subject, have a right to:
Notwithstanding the above, a right conferred on a data subject may be exercised by:

Depending on the Services you are obtaining or accessing, we may collect, store, use and transfer different types of information including, but not limited to;

By using the Site you consent to this data listed in Paragraph (6.) being collected, stored and used as need be.

By using the Site you agree to the following terms and conditions;

8.1 Depending on the Services you are accessing, we may share certain personal information with third parties to help you access certain services. For example, Project Owners have access to project executor’s personal data. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers and/or project owners to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our Policies.

8.2 Your personal information may also be transferred outside Kenya either for ease of delivery of Services, storage or other necessary form of processing as described in this Policy. When such transfer is necessary and for your benefit, we ensure an appropriate and similar degree of protection is afforded to it by requiring implementation of relevant safeguards by the recipient of the personal data as required by the law in Kenya.

We regularly review and update this Policy in order to reflect changes to our practices, for operational, legal or regulatory reasons, and for any other purpose. Any revisions to this Policy will be uploaded to the Site and such upload will be deemed to be sufficient communication to you. Where you are a registered user, we may elect, at our own discretion, to notify you of any revision through a notice on your account.