IQSK applies reasonable technical and organisational safeguards such as HTTPS, secure access links, role-based permissions, password hashing, audit logs, backups, and security monitoring.
Privacy policy
Privacy Policy
This Privacy Policy explains how personal data is collected, used, stored, shared, protected, and retained when members and authorised users access or use the IQSK Elections Portal.
What personal data may be processed
Member and voter identification data such as full name, membership number, membership category, register status, and voter eligibility status.
Contact data such as email address, telephone number, and communication preferences where applicable.
Election administration data such as voting access link status, ballot access status, ballot submission status, support requests, complaints, and register review records.
Technical and security data such as IP address, device/browser information, session identifiers, access timestamps, audit logs, and security event logs.
Candidate, proposer, and seconder details where required by the election process.
What the Portal should not normally collect
National identity card numbers or passport numbers unless expressly required by law or a lawful election process.
Biometric data, health information, political opinions, religious beliefs, or precise location data.
Financial account data, residential addresses, or unnecessary demographic data not needed for election administration.
Why IQSK processes personal data
Personal data may be processed to prepare and maintain the election register, confirm voter and candidate eligibility, deliver election communications, issue voting access links, support ballot access, prevent duplicate or unauthorised voting, maintain audit trails, support technical assistance, and resolve complaints or disputes.
Processing may also be necessary for tallying, verification, final reporting, legal compliance, defence of rights, and institutional accountability.
IQSK does not rely on consent as the sole basis for processing personal data that is necessary for election administration, security, audit, dispute resolution, or legal compliance.
Sharing and processors
Personal data may be shared only where necessary and lawful with the Commission, authorised IQSK Secretariat personnel, authorised system administrators, technical support providers, scrutineers, observers, auditors, hosting providers, email/SMS providers, cybersecurity providers, legal advisers, or competent authorities where legally required.
Personal data is not sold and is not shared for unrelated marketing, political, commercial, or third-party purposes.
Security, retention, and your rights
Personal data is retained only as long as reasonably necessary for election administration, audit, dispute resolution, legal compliance, and institutional accountability, after which it may be deleted, anonymised, aggregated, or securely archived.
Subject to the Data Protection Act, 2019, data subjects may have rights of access, correction, objection, restriction, erasure where applicable, withdrawal of consent where relevant, and complaint to the Office of the Data Protection Commissioner.
Data protection and election register review requests may be directed to elections@iqskenya.org until any separate data protection contact is formally published by IQSK.