Last updated: 2026-02-07
KBA Institute ("we", "our", "us") is committed to protecting personal data processed through the Membership Portal.
1. Data We Collect
- Account and identity data: name, email, phone, ID/passport details, and login metadata.
- Membership application data: qualifications, employment details, supporting documents, and consent records.
- Financial records: invoices, payment references, receipts, and renewal history.
- Activity and audit records: approval decisions, appeal actions, and security events.
2. Why We Process Data
- To evaluate and administer membership applications.
- To generate invoices, process payments, and issue receipts/certificates.
- To support renewals, compliance tracking, and member support requests.
- To meet legal, regulatory, and audit obligations.
3. Legal Basis and Consent
Where required, processing is based on consent, contractual necessity, and legitimate interest in secure membership administration. Consent checkboxes are captured during application submission.
4. Sharing and Processors
We share data only with processors needed to operate the service (for example, cloud hosting, payment gateways, and email delivery). We do not sell personal data.
5. Retention
- Active member records are retained for operational and compliance purposes.
- Archived records may be retained according to legal obligations.
- You may request deletion where lawful and where retention obligations do not apply.
6. Data Subject Rights
Subject to applicable law (including GDPR/CCPA where relevant), you may request:
- Access to your personal data
- Correction of inaccurate data
- Data export
- Deletion or restriction of processing
Contact: info@kbainstitute.co.ke
7. Security
We apply organizational and technical safeguards including role-based access control, audit logging, and encrypted transit for sensitive workflows.
8. International Transfers
Where processors operate in multiple jurisdictions, transfers are handled under appropriate safeguards.
9. Updates
This policy may be updated periodically. Material changes will be communicated through portal notices or email.