Your privacy.
Our responsibility.

What is the purpose of this policy?

The purpose of this Protection of Personal Information Policy is to inform data subjects about the types of personal information Aurora Vision Limited processes by collecting, receiving, recording, storing, updating, distributing, erasing or destroying, using and disclosing such Personal Information.

We are proud to demonstrate our commitment to your privacy by complying with the Data Privacy Laws and regulations under applicable privacy laws in Kenya. We will treat Personal Information in a manner consistent with this policy under which it was collected unless we have your consent to treat it differently.

To whom does this policy apply?

This Policy applies to the processing of your Personal Information by Aurora Vision Limited and, where applicable, its subsidiaries, affiliates, partners and service providers.

What is personal information?

Personal information, for the purposes of this Policy, is any form of information that is identifiable to you. This information may include but is not limited to:

How do we collect your personal information?

We will always collect your Personal Information by fair, lawful and reasonable means, ensuring that we protect your privacy. We may collect Personal Information directly from you or from third parties, where we have obtained your consent to do so or as otherwise permitted by law, such as where it is contained in a public record or has been made public by you.

When and how do we obtain your consent?

We obtain your consent before collecting, using, or disclosing your Personal Information for any purpose, unless we are otherwise permitted to do so without your consent (e.g., to carry out actions about the conclusion or performance of a contract). You may provide your consent to us either electronically or in writing.

You may withdraw your consent or object to our processing of your Personal Information at any time by contacting us. However, your withdrawal of consent is not an absolute right, and we may have legal or legitimate grounds not to uphold it.

Where do we store your personal information?

We will keep the Personal Information that we collect from you on-site at our offices at Valley View Office Park, Nairobi, Kenya, as well as off-site.

Our service providers include data storage and processing providers operating both in the Republic of Kenya and, in certain instances, outside of the Republic of Kenya. We will ensure that any data processors we utilise comply with the provisions of this Policy.

How do we use your personal information?

We will only collect your Personal Information for a specific, lawful and clear purpose. We generally use your Personal Information for the following purposes:

• To provide services or products you request.
• To respond to enquiries and communications.
• To contact you where you have specifically consented to follow-up contacts or to receive newsletters.
• When you subscribe to one of our services.
• When you browse our websites.
• When you participate in events or public relations activities organised by us.
• When you apply for a job at Aurora Vision Limited.
• When you wish to get in touch with us to ask a question or make a complaint.
• For such other purposes to which you may consent or which are authorised by law.

Direct marketing

We only use your Personal Information to contact you for marketing purposes when you have consented to us doing so. If you are an existing customer, we may use your Personal Information to market similar products or services, subject to applicable requirements and your right to object.

Special personal information

Special Personal Information is sensitive Personal Information that may relate to your race or ethnic origin, trade union membership, or criminal behaviour. We only process special Personal Information if you have expressly consented, if it is necessary in terms of law, or if the processing is for historical or statistical purposes.

How long do we retain your information?

We will utilise, disclose or retain your Personal Information for as long as necessary to fulfil the purposes for which that Personal Information was collected and as permitted or required by law. Once the purpose no longer applies, we will ensure that it is deleted, destroyed or de-identified.

To whom do we provide personal information?

We may disclose your Personal Information to trusted third-party service providers with whom we have contractual agreements that include appropriate privacy standards. We may also disclose information to a potential acquirer in connection with a transaction, or as required by law.

Affiliates and other third parties

We ensure that all affiliates, subsidiaries and other third parties that are retained to perform services on our behalf and are provided with Personal Information are required to comply with this Framework and our privacy practices.

Accessing your personal information

If you make a written request to review any Personal Information about you that we have collected, utilised or disclosed, we will provide you with any such Personal Information to the extent required by law, in a form that is generally understandable.

Keeping your information accurate

We will ensure that your Personal Information is kept as accurate, complete and up-to-date as reasonably possible. At any time, you can challenge the accuracy or completeness of your Personal Information in our records, and we will amend or delete it as required.

How quickly do we respond?

We will attempt to respond to each of your written requests no later than 30 days after receipt of such requests. You have the right to make a complaint to us in respect of this time limit.

Are there costs for accessing information?

We will not charge any fees for you to access your Personal Information in our records without first providing you with an estimate of the approximate costs, if any.

Verifying your identity

We may request that you provide sufficient identification to permit access to the existence, use or disclosure of your Personal Information. Any such identifying information shall be used only for this purpose.

How do we protect your information?

We have implemented physical, organisational, contractual and technological security measures to protect your Personal Information from loss, theft, unauthorised access, disclosure, copying, use or modification.

We will provide you and the information protection regulator with detailed written notification should there be a security breach.

Contact us about your personal information

All comments, questions, concerns or complaints regarding your Personal Information or this Policy should be forwarded to us as follows:

Changes to this Privacy Policy

We may update this Policy at any time to reflect possible new practices and service offers. The date of the Policy will be updated to indicate when such changes were made. If we make any substantial changes, you will be informed by a notice posted on our websites.

Links to third-party websites

While browsing our websites, you may come across links to third-party applications and websites. Aurora Vision Limited has no control over the cookies or other functions used by such third parties, and any Personal Information processing implemented by them is not governed by this Privacy Policy.