Privacy Policy

1. Introduction

VPMC is committed to respecting the privacy and personal data of website visitors, prospective clients, clients, training participants, partners and other people who communicate with us.

This policy applies to personal information collected through our website at vpmc.co.ke and through related inquiries and communications, where applicable.

We aim to handle personal information in accordance with applicable Kenyan data protection law, including the Data Protection Act, 2019 and relevant regulations.

2. Information we collect

The information we collect depends on how you interact with VPMC and which website features or services you use. It may include:

• Contact information: your name, email address, telephone number, organisation and job title when you provide them.
• Inquiry information: the content of messages, questions, requests for proposals and other communications you send us.
• Programme information: details you submit when registering or expressing interest in an event, course or training programme, where such registration is available.
• Technical information: information such as browser type, device details, approximate usage data and server logs that may be generated when you visit the website.
• Other information: information you choose to provide when communicating or working with us.

Please provide only information that is relevant to your request. We do not ask you to submit sensitive personal information through ordinary website forms unless it is specifically necessary and appropriate safeguards and explanations are provided.

3. How we use your information

Depending on the circumstances, VPMC may use personal information to:

• Respond to questions, inquiries and requests for information.
• Communicate about our consultancy, training and technical services.
• Manage event or programme registrations where those services are offered.
• Prepare proposals and coordinate services requested by an organisation.
• Maintain website functionality, diagnose errors and help protect the website.
• Meet applicable legal obligations and address legitimate business or security needs.
• Send updates or promotional communications where permitted by law and, where required, with your consent.

We seek to use personal information only for clear, relevant purposes and to limit collection to what is reasonably necessary for those purposes.

4. Lawful basis for processing

Where applicable law requires a lawful basis, VPMC will rely on the basis relevant to the particular activity. Depending on the circumstances, this may include your consent, steps taken at your request before entering into a contract, performance of a contract, compliance with a legal obligation, or another lawful basis permitted by applicable law.

Where processing relies on consent, you may withdraw that consent. Withdrawal does not affect processing that lawfully took place before the withdrawal, and other legal grounds may apply where relevant.

5. How we share information

VPMC does not intend to sell personal information collected through this website. We may disclose relevant information in limited circumstances, such as:

• To authorised team members who need it to respond to your request or provide a service.
• To service providers supporting website hosting, email, communications or other operational functions, where applicable.
• When disclosure is required or permitted by law or necessary to establish, exercise or defend legal claims.
• Where you have given valid consent or requested a disclosure.

Where third parties process personal data on our behalf, appropriate arrangements should be used to protect the information and limit its use.

6. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, taking account of service delivery, legitimate record-keeping needs, applicable legal requirements and the resolution of disputes.

When information is no longer required, we will take appropriate steps to delete it, anonymise it or otherwise dispose of it securely, subject to any legal retention obligations.

7. How we protect information

We aim to apply appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No website, electronic transmission or storage system can be guaranteed to be completely secure. Please avoid sending confidential or sensitive information through ordinary website forms or email unless the channel is suitable for that information.

8. Cookies and website technologies

Our website or its underlying WordPress platform, theme and plugins may use cookies or similar technologies to support essential functionality, remember preferences, maintain security or understand website performance, depending on the features enabled.

The actual cookies in use depend on the website configuration and third-party services enabled. We should not assume that analytics or advertising cookies are active without verifying the installed tools.

You can manage or delete cookies through your browser settings. Blocking certain cookies may affect some website features. Where consent is legally required for optional cookies, those cookies should be managed accordingly.

9. International transfers

Some website hosting, email or technology providers may process information outside Kenya, depending on the services configured. If personal data is transferred outside Kenya, VPMC should ensure that the transfer complies with applicable data protection requirements and that appropriate safeguards are in place where required.

10. Your privacy rights

Subject to applicable law and any relevant limitations, you may have the right to:

• Be informed about how your personal data is used.
• Request access to personal data held about you.
• Request correction of inaccurate or misleading personal data.
• Request deletion of personal data where the law provides that right.
• Object to certain processing of your personal data.
• Withdraw consent where processing is based on consent.
• Raise a concern or lodge a complaint with the relevant supervisory authority.

To exercise a right, contact us using the details below and describe your request. We may need to verify your identity before responding. We will handle requests in accordance with applicable legal requirements and time limits.

You may also find information about data subject rights from the Office of the Data Protection Commissioner (ODPC).

11. Links to other websites

Our website may contain links to external websites or services. Those websites are operated independently and may have their own privacy policies and practices. VPMC is not responsible for the privacy practices of external websites. Please review their policies before submitting personal information to them.

12. Children's privacy

This website is intended primarily for organisations, professionals and adults interested in VPMC's services. We do not knowingly seek to collect children's personal information through ordinary website interactions unless it is necessary for a specific, properly managed programme and handled in accordance with applicable law.

If you believe a child has provided personal information inappropriately, please contact us so the matter can be reviewed.

13. Changes to this Privacy Policy

We may update this policy from time to time to reflect changes in our website, services, legal requirements or data handling practices. The latest version will be published on this page with an updated revision date. Please review it periodically.

14. Contact VPMC about privacy

If you have a question about this policy or wish to make a privacy request, please contact VPMC using the details below.