GDPR Compliance

Your data protection rights under GDPR

Right to Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Restriction

Limit how we use your personal data.

Right to Portability

Receive your data in a machine-readable format.

Right to Object

Object to processing of your personal data.

About GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It gives individuals in the European Union greater control over their personal data and imposes strict obligations on organizations that process such data.

AfriVoices is committed to full GDPR compliance, even for users outside the EU, because we believe everyone deserves strong data protection.

Our GDPR Commitments

Lawful Processing

  • We process data only with your consent or legal basis
  • Clear purpose for each data collection
  • Transparent about how we use your data

Data Minimization

  • Collect only necessary data
  • Retain data only as long as needed
  • Regular data deletion procedures

Data Security

  • Industry-standard encryption
  • Regular security assessments
  • Incident response procedures

Accountability

  • Documented compliance measures
  • Data Protection Impact Assessments
  • Regular compliance audits

How to Exercise Your Rights

Request Process

To exercise any of your GDPR rights, please contact us at:

privacy@afrivoices.com

We will respond to all requests within 30 days as required by GDPR.

1. Access Your Data

Request a complete copy of all personal data we hold about you. We'll provide this in a commonly used electronic format.

2. Correct Your Data

Update incorrect or incomplete information through your account settings or by contacting us.

3. Delete Your Data

Request deletion of your account and all associated personal data. Note: We may retain certain information for legal compliance.

4. Export Your Data

Download your data in JSON or CSV format for transfer to another service provider.

5. Restrict Processing

Temporarily limit how we process your data while we investigate your concerns.

6. Object to Processing

Object to specific uses of your data, such as marketing communications or profiling.

International Data Transfers

When we transfer your data outside the EU/EEA, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data Processing Agreements with all third-party processors
  • Ensuring recipients provide adequate data protection safeguards
  • Regular compliance assessments

Data Processing Records

We maintain detailed records of all data processing activities as required by Article 30 of GDPR:

  • Purpose and legal basis for processing
  • Categories of personal data processed
  • Data retention periods
  • Technical and organizational security measures
  • Details of data transfers outside the EU

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours
  • Inform affected individuals without undue delay
  • Provide clear information about the breach and our response
  • Take immediate action to mitigate harm

Children's Privacy (Article 8)

AfriVoices does not knowingly process personal data of children under 16 without parental consent. If you believe we have collected data from a child, please contact us immediately at privacy@afrivoices.com.

Supervisory Authority

If you believe we have not adequately addressed your GDPR concerns, you have the right to lodge a complaint with your local Data Protection Authority or:

Office of the Data Protection Commissioner (Kenya)

Website: www.odpc.go.ke

For EU residents, contact your national supervisory authority. Find yours at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

Contact Our DPO

For GDPR-related questions or to exercise your rights, contact our Data Protection Officer:

  • Email: dpo@afrivoices.com
  • Privacy Team: privacy@afrivoices.com
  • Address: Shoman Group, Nairobi, Kenya