Data Privacy Policy
Data Privacy Policy
Purpose
This policy establishes Setok Engineering Limited's commitment to protecting the privacy and personal data of employees,
customers, and stakeholders.
Scope
This policy applies to all employees, contractors, and third-party service providers who handle personal data on behalf of Setok
Engineering Limited.
Policy Statements
1. Data Protection: We protect personal data against unauthorized access, use, and disclosure.
2. Compliance: We comply with all applicable data privacy laws and regulations.
3. Transparency: We inform individuals about how their personal data is collected, used, and protected.
Procedures
1. Data Collection and Use: Define procedures for the lawful and transparent collection and use of personal data.
Processes: Data minimization, purpose specification.
Tools: Consent forms, data collection templates.
2. Data Security: Implement measures to secure personal data against breaches and unauthorized access.
Methods: Encryption, access controls.
Tools: Data protection software, secure storage solutions.
3. Data Subject Rights: Establish procedures for individuals to access, correct, or delete their personal data.
Processes: Data access requests, correction procedures.
Tools: Data request forms, tracking systems.
Responsibilities
1. Data Protection Officer: Responsible for overseeing data privacy compliance and handling data protection issues.
2. Employees: Responsible for following data privacy policies and procedures in their roles.
Compliance
Setok Engineering Limited complies with data privacy laws, including the General Data Protection Regulation (GDPR) and the
Kenya Data Protection Act.
Commitments
1. Regularly assess and improve data protection measures to address emerging threats and vulnerabilities.
2. Provide ongoing training to employees about data privacy responsibilities and best practices.
Review and Updates
This policy will be reviewed annually to ensure its effectiveness and compliance with data privacy laws. Updates may be made as
necessary to reflect changes in legal requirements or organizational practices.
Approved By
Date Approved: February 5th, 2024 and Next Review Date: February 5th, 2025