Privacy Policy

Huduma Events Staff Dashboard (HESD) is committed to protecting your personal data. This Privacy Policy describes how we collect, store, process, and share information in compliance with the Kenya Data Protection Act (2019).

By using HESD, you agree to the practices described in this policy.

We collect information necessary to provide and improve HESD services, including:

• Personal Information: Name, username, email, phone number, station/department.
• Account Data: Login credentials, roles, permissions.
• System Usage: Reports, tickets handled, dashboard activity, timestamps.
• Technical Data: IP address, browser type, device information.

Your information is used for:

• Providing access to HESD functionalities.
• Generating reports and statistics.
• Maintaining and improving system performance and security.
• Communicating announcements, updates, or system alerts.
• Compliance with legal obligations under Kenyan law.

We respect your privacy and do not sell personal data. Data may only be shared as follows:

• Authorized HESD administrators for operational purposes.
• Third-party service providers under strict confidentiality agreements.
• Legal or regulatory authorities as required by law.

• Encryption of sensitive information in transit and at rest.
• Role-based access controls to limit data access.
• Regular monitoring, audits, and system logging.
• Secure backups and disaster recovery protocols.
• Periodic security assessments and patching.

Data is retained only as long as necessary for legitimate purposes or legal compliance:

• User account information: Until account deletion or deactivation.
• Reports and tickets: 2–5 years depending on operational policies.
• System backups: Up to 12 months in secure storage.

In case of a personal data breach, HESD will:

• Notify affected users without undue delay.
• Report the breach to the Office of the Data Protection Commissioner as required under Kenyan law.
• Take measures to contain the breach and prevent future incidents.

Under the Kenya Data Protection Act, you have the right to:

• Access your personal data held by HESD.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data where legally permitted.
• Object to certain processing activities.
• Withdraw consent to data processing at any time.

Requests can be submitted to the system administrator or via the contact information below.

• HESD may use cookies and similar technologies to enhance user experience.
• Tracking may be used for system performance, login sessions, and analytics.
• Users may disable cookies, but this may impact system functionality.

HESD may use trusted third-party services for analytics, backups, or maintenance. All third-party providers adhere to confidentiality and data protection standards. We do not share personal data beyond what is necessary for these services.

HESD may update this policy periodically to reflect system changes, legal requirements, or best practices. The most current version will always be posted on this page. Users are encouraged to review it regularly.

If you have questions, concerns, or requests regarding this Privacy Policy, contact the HESD administrator:

• Email: admin@hesd.com
• Phone: +254-XXX-XXXXXXX