Nyayo Tea Zones Development Corporation

ntzdc website privacy policy

 

Nyayo Teazones Development Corporation (“the Corporation”, “we”, “our”, or “us”) is committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data obtained through our website.

1. Legal Basis for Processing

We process personal data in accordance with the Data Protection Act, 2019, on the basis of:

  • Consent provided by the data subject

  • Performance of a statutory or contractual obligation

  • Compliance with legal requirements

  • Legitimate interests of the Corporation, where applicable

2. Personal Data We Collect

We may collect and process the following personal data:

  • Identification details such as name and organization

  • Contact details including email address and phone number

  • Information voluntarily submitted through website forms or correspondence

  • Technical data such as IP address, browser type, and website usage statistics

3. Purpose of Data Collection

Personal data collected through this website is used for:

  • Responding to inquiries and official communication

  • Service delivery and stakeholder engagement

  • Improving website functionality and user experience

  • Compliance with statutory and regulatory obligations

  • Ensuring website security and integrity

4. Cookies and Tracking Technologies

Our website may use cookies to enhance functionality and analyze traffic. Cookies do not collect personal data unless expressly provided by the user. Users may control or disable cookies through browser settings.

5. Data Sharing and Disclosure

Personal data will not be sold, leased, or shared with third parties except:

  • Where required by law or court order

  • Where necessary for the performance of the Corporation’s mandate

  • With authorized service providers under confidentiality and data protection obligations

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected or as required by law, after which it is securely deleted or anonymized.

7. Data Security Measures

We implement appropriate technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction, in line with the Data Protection Act, 2019.

8. Rights of Data Subjects

In accordance with the Data Protection Act, 2019, data subjects have the right to:

  • Be informed of the use of their personal data

  • Access their personal data

  • Object to the processing of their personal data

  • Request correction or deletion of false or misleading data

  • Withdraw consent at any time, where processing is based on consent

9. Third-Party Websites

Our website may contain links to external websites. The Corporation is not responsible for the privacy practices or content of third-party websites.

10. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect legal or operational changes. Updates will be published on this page.

11. Contact Information

For questions, concerns, or requests relating to personal data, please contact the Corporation using the official contact details provided on this website.