Data Protection Compliance
Our commitment under the Kenya Data Protection Act, 2019
The Kenya Data Protection Act, 2019
The Kenya Data Protection Act, 2019 (KDPA) is Kenya's primary legislation governing the collection, processing, and storage of personal data. As a Kenyan technology company, Afrensics is fully committed to complying with the KDPA in all our products and services.
The KDPA established the Office of the Data Protection Commissioner (ODPC) as the regulatory body responsible for overseeing data protection compliance in Kenya. Afrensics operates in alignment with ODPC guidelines.
How Afrensics Collects & Processes Personal Data
We collect and process personal data only for specified, explicit, and legitimate purposes. Our data processing activities include:
- Account creation and management for BiloHub subscribers
- Processing payments via M-Pesa and card providers
- Providing customer support and responding to enquiries
- Sending service notifications and product updates
- Improving our platform through usage analytics
- Complying with legal and regulatory obligations
We do not process data beyond these stated purposes, and we do not sell personal data to third parties.
Your Rights as a Data Subject
Right to be Informed
You have the right to know what personal data we collect, how we use it, who we share it with, and how long we retain it.
Right of Access
You can request a copy of the personal data we hold about you at any time, free of charge.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure
Also known as the 'right to be forgotten' — you can request that we delete your personal data, subject to legal obligations.
Right to Restrict Processing
You can ask us to stop using your personal data for certain purposes while still retaining it.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and transmit it to another provider.
Right to Object
You can object to our processing of your personal data for direct marketing, profiling, or processing based on legitimate interests.
Data Protection Officer
Afrensics has designated a Data Protection Officer (DPO) to oversee our compliance with the KDPA. To exercise your rights or raise a data protection concern, contact our DPO directly:
Lodging a Complaint with the ODPC
If you believe your data protection rights have been violated and you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya. The ODPC is the national supervisory authority for data protection matters.
We encourage you to contact us first at dataprotection@aedisecurity.com so we can resolve the matter directly.
Cross-Border Data Transfers
When we transfer personal data outside Kenya — for example, to cloud infrastructure providers — we ensure appropriate safeguards are in place as required by the KDPA. These safeguards include contractual protections and assessments of data protection laws in the receiving country.