📅 Effective date: 1 January 2026 · Last updated: May 2026
The JKUAT Alumni Association ("we", "us", "our") is committed to protecting the privacy and personal data of our members. This Privacy Policy explains how we collect, use, store, and protect information when you use the alumni portal and associated services.
1. Information We Collect
Information you provide directly
- Registration details: name, email, phone, date of birth, student number
- Academic history: graduation year, programme of study, school/faculty
- Professional information: employer, job title, industry, LinkedIn profile
- Profile photo and biographical information
- Payment information (M-Pesa phone number; no card details are stored)
- Content you post: messages, comments, job listings, event registrations
Information collected automatically
- Login timestamps, IP address, browser and device type
- Pages visited and features used within the portal
- Email open and click events for newsletters (using tracking pixels)
2. How We Use Your Information
- To manage your alumni membership and portal account
- To process membership payments via M-Pesa
- To send transactional emails (receipts, event confirmations, password resets)
- To enable member-to-member networking, messaging, and mentorship
- To send newsletters and event announcements (opt-out available)
- To maintain the alumni directory and facilitate reconnection among graduates
- To improve our services and generate anonymised statistics for JKUAT
- To comply with legal obligations
3. Sharing of Information
We do not sell your personal data to third parties. We may share your information in the following limited circumstances:
- With JKUAT University: Aggregated, anonymised statistics. Individual data only with your consent.
- With service providers: Safaricom (M-Pesa payment processing), email delivery providers — bound by data processing agreements.
- Within the alumni community: Your profile is visible to other alumni according to your privacy settings.
- Legal requirements: When required by Kenyan law or a court order.
4. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, your personal identifiers are anonymised within 30 days. Payment records are retained for 7 years as required by Kenyan tax law. Backup copies may persist for up to 90 days after deletion.
5. Your Rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate information
- Erasure — request deletion of your account and data
- Restriction — limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — opt out of direct marketing at any time
To exercise these rights, visit your account settings or email privacy@alumni.jkuat.ac.ke.
6. Security
We implement appropriate technical and organisational measures including TLS encryption, bcrypt password hashing, rate limiting on login attempts, and access controls restricted to authorised administrators. No system is 100% secure; please choose a strong, unique password and enable two-factor authentication.
7. Cookies
We use strictly necessary session cookies to keep you logged in. We do not use advertising or cross-site tracking cookies. You can disable cookies in your browser, but this will prevent you from logging in.
For privacy-related queries, contact our Data Protection Officer at privacy@alumni.jkuat.ac.ke or write to: JKUAT Alumni Association, P.O. Box, JKUAT Main Campus, Juja, Kenya.