Data Protection Policy (Kenya)

This Data Protection Policy outlines how StockAnalyst ("we", "us", or "our") collects, uses, processes, and protects your personal data in compliance with the Data Protection Act, 2019 of Kenya. We are committed to safeguarding your privacy and ensuring the security of your personal information.

By interacting with our services, you acknowledge that you have read and understood this policy.

Personal Data We Collect

How We Use Your Personal Data

We use your personal data for various purposes, including but not limited to:

• Providing and managing our services to you.
• Processing transactions and sending related information.
• Communicating with you about our services, updates, and promotional offers.
• Improving our website, products, and services.
• Detecting and preventing fraud, security breaches, and other illegal activities.
• Complying with legal and regulatory obligations in Kenya.
• Conducting research and analysis to understand market trends.

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds as per the Data Protection Act, 2019:

• Consent: Where you have given explicit consent for specific processing activities.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your fundamental rights and freedoms do not override those interests.

Sharing Your Personal Data

We may share your personal data with:

• Service providers who perform services on our behalf (e.g., IT support, payment processing).
• Regulatory bodies, government agencies, or law enforcement when required by law or to protect our rights.
• Third parties in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality agreements.
• With your consent, for any other purpose disclosed to you at the time of collection.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your Data Protection Rights

Under the Data Protection Act, 2019, you have the following rights regarding your personal data:

• Right to be informed: About the use of your personal data.
• Right of access: To your personal data.
• Right to object: To the processing of your personal data.
• Right to rectification: To correct inaccurate or incomplete personal data.
• Right to erasure (Right to be forgotten): To request deletion of your personal data under certain circumstances.
• Right to restriction of processing: To limit how your data is processed.
• Right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format.
• Rights in relation to automated decision making and profiling.

To exercise any of these rights, please contact us using the details provided below.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Changes to This Policy

We may update this Data Protection Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.