Privacy Policy
How we collect, use and protect your personal data.
Last updated: 27 September 2026. [Staff: have this reviewed by the SACCO’s data protection officer or legal adviser before publishing.]
Who we are
KCAU SACCO (“the SACCO”, “we”) is the data controller for personal data collected through this website. Contact: info@kcausacco.co.ke.
What we collect
- Information you submit in our forms: name, contact details, ID number and other details needed to process a membership application or enquiry.
- Newsletter sign-ups: your email address and, optionally, name and phone number.
- Technical data: IP address and browser type for security and anti-spam, and — only if you accept analytics cookies — anonymous usage statistics.
Why we use it
- To respond to your enquiries and process membership applications (performance of a contract / steps before a contract).
- To send newsletters and notices you have subscribed to (consent — you can unsubscribe any time).
- To keep this website secure and prevent fraud (legitimate interest).
- To meet our legal and regulatory obligations.
Sharing
We do not sell your data. We share it only with service providers who help us run the SACCO (for example hosting and email providers) under confidentiality agreements, or where the law requires.
Retention
Enquiries are kept for up to 24 months. Membership records are kept for as long as you are a member and thereafter as required by law.
Your rights
Under the Data Protection Act, 2019 you have the right to be informed, to access your data, to object to processing, to correct or delete inaccurate data, and to data portability. To exercise these rights contact us at info@kcausacco.co.ke. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
Cookies
We use a session cookie that is strictly necessary for forms and security. Analytics cookies (Google Analytics) are only set if you click “Accept” on the cookie banner. You can change your choice any time using the “Cookie settings” link in the footer.