Concept note. This is placeholder content for a demonstration site and is pending legal review. It is not the Ministry's official privacy notice. Do not rely on it for legal purposes.
This notice explains what personal data the State Department for Foreign Affairs ("we", "us") collects through this website, why we collect it, how long we keep it, and the rights you have over it. It is written to reflect the principles of the Data Protection Act, 2019 (Kenya).
What data we collect
We collect personal data only when you choose to give it to us through the forms and services on this site. Depending on what you do, this may include:
- Diaspora registration - your name, country of residence, contact details and the details you provide about yourself and dependants.
- Appointment booking - your name, contact details, the service requested and your preferred mission, date and time.
- Enquiries and help requests - your name, contact details and the contents of your message.
- Event RSVPs - your name, contact details and the event you wish to attend.
We also collect limited technical information (such as your browser type and pages visited) needed to keep the site secure and working well.
Why we collect it and our lawful basis
We use your data to deliver the service you have asked for - to register you, confirm an appointment, answer an enquiry or manage an event. Under the Data Protection Act, 2019, we rely on one or more of the following lawful bases:
- Consent - where you have actively chosen to submit a form.
- Performance of a task carried out in the public interest - the delivery of consular and diplomatic services.
- Compliance with a legal obligation - where the law requires us to process certain records.
How long we keep it
We keep personal data only for as long as it is needed for the purpose it was collected, or for as long as the law requires us to retain it. When data is no longer needed, it is securely deleted or anonymised. Specific retention periods will be set out in the Ministry's records-management schedule.
Your rights
Under the Data Protection Act, 2019, you have the right to:
- Access - ask for a copy of the personal data we hold about you.
- Correction - ask us to correct data that is inaccurate or incomplete.
- Erasure - ask us to delete your data where there is no lawful reason to keep it.
- Objection and restriction - object to, or ask us to limit, certain uses of your data.
To exercise any of these rights, contact our Data Protection Officer using the details below.
Cookies
This site uses only the minimal cookies needed for it to function and to remember basic preferences. It does not use advertising or third-party tracking cookies. You can clear or block cookies in your browser settings; some features may not work as well if you do.
Contact the Data Protection Officer
For privacy questions, requests or complaints, contact the Data Protection Officer at dpo@mfa.go.ke. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner.