Data protection notice

This notice is given under section 29 of the Data Protection Act, 2019.

• Who we are: Pentarch Systems Solutions, Nairobi, Kenya, operator of ComplyScope Kenya.
• What we collect and why: account details to give you access; business details to work out your obligations and deadlines; documents you choose to upload as evidence; payment details to process subscriptions.
• Legal basis: performance of our contract with you, our legal obligations and our legitimate interest in keeping the service secure.
• Third parties: hosting, email, SMS and payment providers acting on our instructions. No sale of data.
• Your rights: to be informed, to access, to correct, to delete, to object and to data portability. Contact pentarchsytemssol@gmail.com.
• Safeguards: hashed passwords, encrypted connections, access limited to your team, audit logs of every change.
• Complaints: Office of the Data Protection Commissioner, odpc.go.ke.

If your business keeps personal data about customers, pupils, patients or staff, you may need to register with the ODPC as a data controller yourself. ComplyScope tracks this obligation for you when it applies.