Legal

Privacy notice

Publication gate G-06 — counsel required

This notice has not been drafted. A privacy notice is a legal instrument with statutory content requirements under the Kenya Data Protection Act 2019 and, where EU or UK data subjects are involved, the GDPR. It must be written or reviewed by counsel and signed off by the data protection officer. The structure below records what this site actually collects, so that whoever drafts it is working from fact rather than a template.

What this site actually collects — for the drafter

RFP submissions

Organisation, contact name, role, business email, telephone, country, indicative budget, timeline, scope description, disciplines of interest, NDA preference. Stored in the application database. Submitter IP address and referring page are recorded alongside the submission.

Session cookies

A Laravel session cookie and a CSRF token cookie, both strictly necessary for the form to function. No analytics, advertising or third-party tracking cookies are set by this application as built.

Server logs

Standard web server request logs, retention governed by the hosting configuration.

Fonts and assets

All fonts and assets are served from this domain. No visitor IP address is disclosed to a third-party font or CDN provider by the application as built.

Sections the drafted notice must contain

Identity and contact details of the data controller, and of the data protection officer
Categories of personal data collected and the purpose of each
Lawful basis for each processing purpose
Recipients and any sub-processors, including hosting
Any transfer outside Kenya and the safeguard relied upon
Retention period for each category, or the criteria determining it
Data subject rights and how to exercise them
Right to lodge a complaint with the Office of the Data Protection Commissioner
Date of the notice and how changes are communicated