Data Protection
Compliant with the Kenya Data Protection Act, 2019 (Act No. 24 of 2019)
e-Poultry Ltd is registered as a data controller with the Office of the Data Protection Commissioner (ODPC) of Kenya. We take our obligations under the Kenya Data Protection Act 2019 seriously and have implemented comprehensive measures to protect the personal and farm data of our 10,000+ users across all 47 counties.
This page outlines our data protection principles, the technical and organizational measures we employ, and how you can exercise your rights as a data subject.
Our Data Protection Principles
Lawfulness & Fairness
We only collect and process your data when we have a lawful basis to do so: your consent, contractual necessity, or legitimate interest. We never collect data secretly or use it in ways you would not reasonably expect.
Transparency
You always know what data we have, why we have it, and who can access it. Our Privacy Policy, this page, and in-app privacy dashboards give you full visibility into our data practices.
Purpose Limitation
Data collected for farm management is used for farm management. Data collected for financing is used for financing. We do not repurpose your data without informing you and obtaining fresh consent.
Data Minimization
We only collect what we need. We do not ask for unnecessary personal information during registration, and our extension officers only see the farm data relevant to their assigned visits.
Accuracy
You can update your personal and farm data at any time through the app or by contacting support. We regularly validate financial records and flag discrepancies for your review.
Accountability
We maintain internal records of all data processing activities, conduct regular data protection impact assessments, and have appointed a Data Protection Officer to oversee compliance.
Technical & Organizational Measures
Encryption
- All data in transit is protected with TLS 1.3 encryption.
- Data at rest uses AES-256 encryption on all storage systems.
- Database backups are encrypted and stored in geographically separate locations.
- M-Pesa and financial transaction data receives additional encryption layers.
Access Controls
- Role-based access control (RBAC) limits data access to authorized personnel only.
- Extension officers can only access data for their assigned farmers.
- All administrative access requires multi-factor authentication (MFA).
- Quarterly access reviews ensure no unnecessary permissions exist.
Infrastructure Security
- Hosted on enterprise-grade cloud infrastructure with SOC 2 Type II certification.
- Regular penetration testing by independent security firms.
- Automated vulnerability scanning on all code deployments.
- DDoS protection and Web Application Firewall (WAF) on all public endpoints.
Incident Response
- 24/7 automated monitoring for unusual data access patterns.
- Documented incident response plan with defined roles and communication protocols.
- Commitment to notify affected users within 72 hours of a confirmed breach, as required by the Kenya Data Protection Act.
- Annual tabletop exercises to test and improve our incident response procedures.
Your Rights Under the Kenya Data Protection Act
Right of Access
Request a full copy of all personal data we hold about you in a structured, machine-readable format.
How to exercise: Go to Settings > Privacy > Download My Data in the app, or email privacy@e-poultry.com.
Right to Rectification
Correct any inaccurate or incomplete personal data we hold.
How to exercise: Edit directly in your profile settings, or contact support for data you cannot edit yourself.
Right to Erasure
Request deletion of your account and associated personal data.
How to exercise: Go to Settings > Account > Delete Account. Financial records may be retained for 7 years per regulatory requirements.
Right to Restrict Processing
Request that we stop processing your data for specific purposes while keeping your account active.
How to exercise: Email privacy@e-poultry.com specifying which processing activities you wish to restrict.
Right to Data Portability
Receive your farm records, production data, and financial history in CSV or JSON format.
How to exercise: Settings > Privacy > Export Data. Exports are generated within 24 hours.
Right to Object
Object to data processing based on legitimate interest, including analytics and platform improvement research.
How to exercise: Email privacy@e-poultry.com or toggle analytics off in Settings > Privacy.
Data Protection Officer
We have appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with the Kenya Data Protection Act and handling all data subject requests.
Data Protection Officer
e-Poultry Ltd
Email: privacy@e-poultry.com
Phone: +254 742 66 53 83
P.O Box 1089 - 40100, Kisumu City, Kenya
Response time: Within 72 hours for standard requests. Urgent matters are escalated within 24 hours.
Filing a Complaint
If you are unsatisfied with our response to a data protection concern, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya:
Office of the Data Protection Commissioner
Telephone: +254 20 2714092
Email: complaints@odpc.go.ke
Website: www.odpc.go.ke