Privacy Policy

SCK Privacy Policy

Last updated: [9th December 2025]

1. Introduction

Sacco Central Kenya (“SCK”, “we”, “our”, or “us”) is committed to protecting the privacy and confidentiality of all individuals who interact with our website, platforms, and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Kenya Data Protection Act (2019) and relevant regulations.

By accessing or using our website, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We may collect personal information when you:

  • Fill out contact or inquiry forms

  • Register for events, workshops, or newsletters

  • Submit documents, feedback, or stakeholder information

  • Request access to SCK services or partnership opportunities

This may include:

  • Name

  • Email address

  • Phone number

  • Organization name(SACCO)

  • Role or title

  • Any other information voluntarily submitted

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address

  • Browser type and device information

  • Pages visited

  • Time spent on pages

  • Cookies and similar tracking technologies (see Cookie Policy)

2.3 Information from Third Parties

We may receive information indirectly from regulators, SACCOs, partners, or development agencies where required for project delivery or stakeholder engagements.

3. How We Use Your Information

We use personal data to:

  • Respond to inquiries or requests.

  • Share updates on SCK projects, events, and sector initiatives.

  • Facilitate stakeholder communication and collaboration.

  • Improve website functionality and user experience.

  • Comply with regulatory obligations.

  • Support the management and development of Shared Services.

We do not sell, rent, or commercially exploit your personal data.

4. Legal Basis for Processing

We process personal data based on:

  • Your consent.

  • Performance of a legitimate function in public interest.

  • Compliance with laws (SASRA & ODPC requirements).

  • Performance of contractual or cooperative obligations.

  • Legitimate interests in improving our services.

5. How We Share Your Information

We may share information with:

  • Regulatory bodies (SASRA, CBK) when required.

  • Development partners (World Bank, FSD Kenya) under strict data agreements.

  • Consultants supporting SCK projects.

  • Technology vendors and service providers supporting website operations.

  • Law enforcement or legal authorities under lawful request.

All third parties are bound by confidentiality and data protection obligations.

6. Data Retention

Personal data is retained only as long as necessary to fulfil the purpose for which it was collected, or as required by law or regulation.

7. Data Security

We implement technical and organizational measures to safeguard data, including:

  • Secure hosting infrastructure.

  • Encryption and access controls.

  • Regular system audits.

  • Restricted staff access based on roles.

8. Your Rights

Under the Kenya Data Protection Act, you have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Withdraw consent.

  • Object to processing.

  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

Requests can be sent to:
📧 info@sck.co.ke

9. Links to External Websites

Our website may contain links to third-party sites. We are not responsible for their content, practices, or privacy controls.

10. Updates to This Policy

We may update this Policy periodically. Changes will be posted with a revised “Last Updated” date.