The County Government of Siaya is committed to protecting the privacy and personal data of individuals who access and use its websites, online platforms, electronic services, applications and other digital services.
1. Introduction
This Privacy Statement explains how the County Government of Siaya collects, uses, stores, protects and, where necessary, shares personal data in accordance with the Constitution of Kenya, the Data Protection Act, 2019, the Data Protection Regulations, 2021, and other applicable laws and regulations.
2. Who We Are
The County Government of Siaya is a public entity established under the Constitution of Kenya and the County Governments Act. For purposes of applicable data protection laws, the County Government may act as a Data Controller and, where applicable, engage or act as a Data Processor.
3. Personal Data We May Collect
- Full name
- Identification or reference numbers
- Postal and physical address
- Telephone/mobile number
- Email address
- Employment and professional information
- Information submitted through online forms
- Complaints, feedback and correspondence
- Public participation submissions
- Applications for county services
- Payment and transaction information where applicable
- Technical information such as IP address, browser type and device information
- Information contained in uploaded documents, photographs, audio or video where necessary for a particular service
4. How We Collect Personal Data
Personal data may be collected directly from you through our website, online forms, applications, email, telephone, social media, public participation activities, complaints and feedback, employment and internship applications, authorised county systems, or other lawful sources.
5. Purpose of Processing Personal Data
We may process personal data to provide county services, process applications, respond to enquiries, manage complaints and citizen engagement, facilitate public participation, process payments, provide HR services, manage suppliers and contractors, communicate with stakeholders, improve digital services, maintain system security, meet statutory obligations, and prevent fraud or unauthorised access.
6. Legal Basis for Processing
Personal data may be processed on lawful grounds provided under Kenyan law, including compliance with a legal obligation, performance of a public function or official authority, performance of a contract or requested service, consent where appropriate, protection of vital interests, and other lawful grounds recognised under the Data Protection Act, 2019.
7. Sharing and Disclosure
The County Government does not sell personal data. Personal data may be shared with authorised government institutions, public bodies, service providers, contractors, professional advisers or other third parties where necessary for service delivery, statutory functions, legal compliance, security, investigations or other lawful purposes.
8. Cross-Border Transfers
Where personal data is transferred outside Kenya, the County Government will ensure that the transfer is undertaken in accordance with applicable data protection requirements and that appropriate safeguards are in place.
9. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, accidental loss, destruction, alteration, misuse and other unlawful forms of processing.
10. Data Retention
Personal data will only be retained for as long as necessary to fulfil the purpose for which it was collected or as required by applicable laws, regulations, records-management requirements and legitimate government functions.
11. Cookies and Similar Technologies
The County Government website may use cookies and similar technologies to support functionality, remember preferences, improve performance, understand website usage and maintain security. Users may manage cookie preferences through their browser or controls provided on the website.
12. External Websites and Services
The website may contain links to external websites, government systems, payment platforms and third-party services. The privacy practices of those external services apply when you leave our website.
13. Your Data Protection Rights
Subject to applicable legal requirements and limitations, you may have the right to be informed about processing, access your personal data, request correction, object to processing, request deletion or erasure where applicable, request restriction of processing, request data portability, and exercise other rights provided under the Data Protection Act, 2019.
14. How to Exercise Your Rights
Requests concerning your personal data should be submitted through the County Government’s designated data protection contact. Requests may require sufficient information to verify your identity and locate the relevant information.
15. Complaints
If you have concerns about how your personal data has been collected, used, stored or disclosed, you may contact the County Government through the designated data protection contact. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in accordance with applicable law.
16. Children’s Data
Where services involve children or minors, appropriate safeguards will be applied and personal data will be processed in accordance with applicable legal requirements.
17. Accuracy of Personal Data
We take reasonable steps to ensure that personal data held by the County Government is accurate and, where necessary, kept up to date.
18. Changes to this Privacy Statement
This Privacy Statement may be reviewed and updated from time to time to reflect changes in legislation, technology, services or data-processing practices. The latest version will be published on the County Government website.
19. Contact Us
County Government of Siaya
P.O. Box 803–40600, Siaya, Kenya
Website: siaya.go.ke
Email: [Insert official data protection/privacy email]
Telephone: [Insert official telephone number]
Data Protection Officer / Designated Privacy Contact: [Insert Name/Office]
Your Privacy Matters: The County Government of Siaya is committed to respecting your privacy and protecting your personal data while providing accessible, secure and accountable public services.