Data Protection & Privacy Policy

1. Commitment to Privacy & Statutory Compliance

Koinonia Consulting Limited ("Koinonia", "we", "us") is committed to safeguarding personal and sensitive data. We process data strictly in compliance with the Kenya Data Protection Act, 2019 (DPA), the regulations of the Office of the Data Protection Commissioner (ODPC), and the Kenya Digital Health Act, 2024 (DHA) where health records are involved.

2. Lawful Basis for Processing

We process personal data based on one or more of the following lawful grounds:

• Explicit Consent: Provided via our consultation and assessment forms.
• Contractual Obligation: To fulfill professional consulting services.
• Legal Compliance: To satisfy statutory obligations under Kenyan law.

3. Data Subject Rights

Under Section 26 of the Kenya Data Protection Act 2019, you have the right to:

• Be informed of the purpose of data collection.
• Access, rectify, or request deletion of personal data in our custody.
• Data portability in structured, machine-readable formats.

4. Data Protection Officer (DPO) Contact

For inquiries regarding our Data Protection Impact Assessments (DPIA) or to exercise statutory data rights: