Privacy Policy

1. Who We Are

Chama Cha Ujenzi ("the Party", "we", "us", or "our") is a provisional political party registered with the Office of the Registrar of Political Parties (ORPP), Kenya. Our head office is located at Chama Cha Ujenzi House, Shela, Lamu Island, Kenya.

We are the data controller for all personal information collected through our website at ujenzi.ke and any associated membership registration channels.

2. Legal Basis for Processing

We process your personal data in accordance with the Kenya Data Protection Act 2019 (Cap. 411C) and the regulations of the Office of the Data Protection Commissioner (ODPC). The legal bases on which we rely are:

• Consent: You explicitly consent to data collection when submitting the membership registration form.
• Legal obligation: Collection of membership data is required by the Political Parties Act and ORPP registration conditions (PPM1 form).
• Legitimate interest: For internal party administration and communication with members.

3. What Data We Collect

When you register as a member of Chama Cha Ujenzi, we collect the following personal information as required by the ORPP PPM1 membership form:

• Full name
• National ID number
• Date of birth and age
• Sex / gender
• Phone number
• Email address
• Occupation
• County, constituency, and ward of residence
• Disability status (PWD indicator)
• Diaspora status
• Name of previous political party (if any)
• Date of joining Chama Cha Ujenzi

We also collect your IP address and browser type automatically for security purposes (bot prevention) when you submit the online form.

4. How We Use Your Data

Your personal data is used solely for the following purposes:

• Processing and verifying your membership registration with Chama Cha Ujenzi
• Submitting member data to the ORPP as required for party registration under the Political Parties Act
• Communicating with you about party activities, events, and updates (with your consent)
• Internal party administration and record keeping
• Complying with applicable legal obligations

We do not use your data for commercial marketing, profiling, or any purpose not listed above. We do not sell, rent, or share your personal data with third parties for commercial gain.

5. Data Storage and Security

Your membership data is stored in a secure Google Sheets database accessible only to authorised party officials. Data is transmitted over encrypted HTTPS connections. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction.

Third-party services used in processing your registration include:

• Google Workspace / Google Sheets — secure data storage (Google's Privacy Policy applies)
• FormSubmit.co — email notification delivery (their Privacy Policy applies)
• EmailJS — OTP email verification (their Privacy Policy applies)

6. Data Retention

We retain your personal data for as long as you remain a member of Chama Cha Ujenzi, or as required by law. If you request deletion of your data, we will process your request within 72 hours, subject to any legal obligations that may require us to retain certain records.

7. Your Rights Under the Data Protection Act 2019

As a data subject under the Kenya Data Protection Act 2019, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data from our records.
• Right to object: You may object to processing of your personal data in certain circumstances.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to withdraw consent: You may withdraw your consent to data processing at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact our Data Protection Officer at dpo@ujenzi.ke or use the data removal request form on the registration page.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been processed unlawfully. Visit odpc.go.ke for more information.

8. Cookies and Website Data

The ujenzi.ke website does not use tracking cookies or third-party advertising cookies. We do not run analytics that track individual users across the web. The only browser storage used is session memory for form state management, which is cleared when you close your browser.

9. Children's Data

Membership registration is restricted to individuals aged 18 years and above. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our website, please contact us immediately at dpo@ujenzi.ke.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our data practices. Any material changes will be published on this page with an updated effective date. Continued use of our website or membership services after changes are posted constitutes acceptance of the updated policy.