Skip to main content

Data Protection & Privacy Policy

Introduction

Effective: 27 June 2026 Updated: 27 June 2026

The Institute for Social Accountability (TISA) respects your privacy and is committed to protecting your personal information. We process personal data responsibly, transparently, and securely in accordance with the Kenya Data Protection Act, 2019 and other applicable laws.

This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you visit our website, participate in our programs, apply for opportunities, communicate with us, or otherwise engage with TISA.

TISA maintains an active registration with the Office of the Data Protection Commissioner (ODPC), Kenya, and continually reviews its data protection practices to ensure compliance with applicable laws and the protection of your personal information.

Our Data Protection Principles

TISA processes personal information according to the following principles:

Lawfulness, Fairness & Transparency

We collect and process personal information lawfully, fairly, and transparently. We will always explain why your information is being collected and how it will be used.

Purpose Limitation

Personal information is collected only for specified, explicit, and legitimate purposes. We will not process your information for purposes incompatible with those for which it was collected.

Data Minimization

We collect only the personal information necessary to provide our services, fulfill our legal obligations, and achieve our organizational objectives.

Accuracy

We take reasonable steps to ensure that personal information is accurate, complete, and up to date. We encourage individuals to notify us whenever their information changes.

Storage Limitation

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by law.

Integrity & Confidentiality

We implement appropriate administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.

Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

Be informed about the collection and use of your personal information.
Access the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information where legally applicable.
Object to the processing of your personal information.
Withdraw consent where processing is based on consent.
Lodge a complaint with the Office of the Data Protection Commissioner.

Information We Collect

Depending on your interaction with TISA, we may collect:

Full name
Postal and physical address
Email address
Telephone number
Organization and job title
National ID / Passport Number
Employment & educational information
Payment & donation information
Mobile money transaction details
IP address
Browser and device information
Form, survey & registration data

How We Collect Your Information

We collect information when you:

Visit our website
Subscribe to newsletters
Register for events or trainings
Participate in surveys or research
Submit applications
Donate or make payments
Contact us via email, phone, or forms
Engage with us on social media

How We Use Your Information

Your personal information may be used to:

Deliver programs and services
Respond to enquiries
Process applications
Register event participants
Manage donations and payments
Send newsletters and updates
Improve website and services
Meet legal obligations
Maintain organizational security

Recruitment

Where you apply for employment or consultancy opportunities, we may process information including your curriculum vitae, academic qualifications, employment history, references, and other information relevant to the recruitment process.

Access to this information is limited to authorized personnel involved in recruitment.

Unless otherwise required by law, unsuccessful applications may be retained for up to twelve months before secure deletion.

Sharing Personal Information

TISA does not sell or rent personal information.

We may share information with:

International Transfers

Where information is transferred outside Kenya, TISA will ensure that appropriate legal safeguards exist and that such transfers comply with the Data Protection Act, 2019.

Data Security

We maintain appropriate safeguards including:

Secure servers
Access controls
Password protection
Encryption
Regular backups
Cybersecurity monitoring
Confidentiality agreements
Staff awareness training

Data Retention

We retain personal information only for as long as necessary to fulfill the purpose for which it was collected or to comply with legal obligations.

When information is no longer required, it is securely deleted or permanently anonymized.

Third Party Websites

Our website may contain links to external websites. TISA is not responsible for the privacy practices or content of third party websites. Users are encouraged to review the privacy policies of those websites.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page together with the revised Last Updated date.

Contact Us

The Institute for Social Accountability (TISA) Westlands Avenue, Wendy Court House No. 10, David Osieli Road Westlands, Nairobi, Kenya
+254 (020) 444 3676 +254 757 129 700

Compliance Statement

The Institute for Social Accountability (TISA) maintains an active registration with the Office of the Data Protection Commissioner (ODPC), Kenya. We remain committed to complying with the Data Protection Act, 2019 and continuously improving our policies, procedures, and security controls to protect all personal information entrusted to us.