Data Subject Requests Procedure
How individuals exercise their rights over their personal data.
Version 1.0 · Last updated 11 November 2026
Your rights
Under the Data Protection Act, 2019, you have the right to:
- Be informed of how your personal data is used.
- Access your personal data.
- Object to the processing of all or part of your personal data.
- Have false or misleading data corrected.
- Have false or misleading data deleted.
- Receive your data in a portable format, where the Act provides for it.
- Withdraw consent you have given, and opt out of direct marketing.
If Helvino holds your data for its own purposes
This covers website enquiries, Helvino staff and applicants, and our business contacts. Email info@helvino.org with the subject "Data request". We may need to confirm your identity first, and we aim to respond within 21 days.
If your data is in a system we run for one of our clients
For example, a school, hospital or business that uses a Helvino system. That organisation is the Data Controller, so please contact it first. If you contact us instead, we will forward your request to the organisation within 5 working days, and then help it respond. We do not act on the data without its instructions.
If you are not satisfied
You can complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.
