Data Privacy Policy
Your privacy matters to us. Here's how Masika Benevolent collects, uses, and protects your personal information.
Overview
Masika Benevolent ("we", "our", "us") is committed to protecting the privacy and security of your personal information. This Data Privacy Policy explains how we collect, use, store, and protect your data when you interact with our services.
We are committed to:
Protecting your personal information, being transparent about our data practices,
complying with Kenya's Data Protection Act, 2019, and giving you control over your own data.
This policy applies to all members, prospective members, and visitors to our website and services. By using our services, you agree to the collection and use of information in accordance with this policy.
Contact us: if you have any questions about this privacy policy, please reach our Data Protection Officer at dpo@masikabbs.com or +254 (0) 703 738 707.
Legal Framework
Masika Benevolent operates in compliance with:
- Kenya Data Protection Act, 2019 — the primary data protection law in Kenya
- GDPR (EU General Data Protection Regulation) — for our international members
- Kenya Constitution, Article 31 — the right to privacy
- Kenya Consumer Protection Act, 2012 — consumer rights protection
What Data We Collect
We collect the following types of personal information to provide and improve our services:
| Category | Data collected | Purpose |
|---|---|---|
| Personal identity | Full name, ID/passport number, date of birth, gender | Member identification and verification |
| Contact information | Phone number, email address, physical address | Communication and service delivery |
| Membership data | Member number, plan type, registration date, payment history | Membership management and billing |
| Family information | Dependant names, relationships, dates of birth | Family coverage and benefits |
| Payment information | M-Pesa receipts, payment amounts, payment dates | Payment processing and records |
| Technical data | IP address, device information, browser type, cookies | Website analytics and security |
Sensitive data: we do not collect sensitive data such as medical records, biometric data, or racial/ethnic origin unless explicitly required and with your consent.
How We Collect Data
We collect data through:
- Direct registration: information you provide during member registration
- Member interactions: communications with our staff and customer service
- Website use: automatic collection through cookies and analytics
- M-Pesa payments: transaction records from payment processing
- Third-party services: verification services where required
Children's data: we do not knowingly collect data from children under 13. If we discover such data, we will delete it promptly.
How We Use Your Data
Your data is used to provide, improve, and personalize our services:
Service delivery
- Process member registrations and renewals
- Manage family coverage and dependants
- Facilitate benefit claims and payments
- Communicate important updates and notifications
Payment processing
- Process M-Pesa payments and confirmations
- Maintain accurate payment records
- Send payment receipts and reminders
Improvement and analytics
- Analyze usage patterns to improve our services
- Personalize member experience
- Develop new products and services
Legal compliance
- Comply with legal and regulatory requirements
- Prevent fraud and unauthorized activities
- Protect the rights and safety of members
We do not: sell your personal data to third parties, share your data for marketing without consent, or use your data in ways not described in this policy.
Data Sharing
We may share your data with:
- Service providers: payment processors, cloud storage, email services
- Legal authorities: when required by law or to prevent harm
- With your consent: when you explicitly authorize sharing
All third-party service providers are contractually obligated to protect your data and use it only for the purposes specified.
Your Data Rights
Under the Kenya Data Protection Act, 2019 and GDPR, you have the following rights:
Request a copy of your personal data
Correct inaccurate or incomplete data
Request deletion of your data ("right to be forgotten")
Limit how we process your data
Transfer your data to another provider
Object to certain data processing
To exercise your rights, contact:
Data Protection Officer ·
dpo@masikabbs.com ·
+254 (0) 703 738 707
Consent Management
You can manage your consent preferences at any time:
Data Retention
We retain your data for as long as necessary to provide services and fulfill legal obligations:
- Active members: data retained for the duration of membership plus 5 years
- Former members: data retained for 7 years for legal and tax purposes
- Inactive members: data archived after 12 months of inactivity
- Payment records: retained for 10 years (legal requirement)
You may request early deletion of your data, subject to legal retention requirements.
Data Security
We implement robust security measures to protect your personal information:
All data encrypted in transit (SSL/TLS) and at rest
Strict role-based access and authentication
Continuous security monitoring and threat detection
Regular secure backups and disaster recovery
Data breach protocol: in the event of a data breach, we will investigate and contain it immediately, notify affected individuals within 72 hours, report to the Office of the Data Protection Commissioner, and take corrective action to prevent future incidents.
Cookie Policy
We use cookies to enhance your browsing experience:
- Essential cookies: required for basic website functionality
- Analytics cookies: help us understand how users interact with our site
- Preference cookies: remember your preferences and settings
You can manage cookie preferences in your browser settings. Disabling essential cookies may affect website functionality.
Report a Concern
If you believe your data has been compromised or misused, please report it immediately:
Email: security@masikabbs.com
Phone: +254 (0) 703 738 707
Regulator: Office of the Data Protection Commissioner — www.odpc.go.ke