1. Introduction

The Association of Engineering Construction and Architecture Students (AECAS) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

We comply with the Kenya Data Protection Act, 2019 and other applicable data protection laws.

2. Information We Collect

We collect information you provide directly to us when registering as a member:

• Personal Information: Full name, email address, phone number
• Academic Information: Course of study, registration number, department
• Payment Information: M-Pesa transaction references (we do not store your M-Pesa PIN or full payment details)

3. How We Use Your Information

We use the information we collect to:

• Process your membership registration
• Verify payment and assign membership numbers
• Send you important updates about events and announcements
• Communicate with you about your membership
• Improve our services and website

4. Legal Basis for Processing

Under the Kenya Data Protection Act, we process your data based on:

• Consent: You provide consent when registering as a member
• Contractual Necessity: Processing is necessary to fulfill our membership services
• Legitimate Interest: To communicate relevant association activities

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only:

• With your consent
• To comply with legal obligations
• With service providers who assist in our operations (e.g., email services)
• With Technical University of Kenya for verification purposes

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS)
• Secure database storage
• Access controls for administrative functions
• Regular security reviews

7. Your Rights

Under the Kenya Data Protection Act, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal requirements)
• Object: Object to processing of your data
• Portability: Request transfer of your data
• Withdraw Consent: Withdraw your consent at any time

To exercise these rights, contact us at support@aecas.co.ke

8. Email Communications

By registering, you agree to receive:

• Registration and payment confirmation emails
• Event notifications and reminders
• Important announcements

You can unsubscribe from non-essential emails at any time using the unsubscribe link in our emails or by contacting us.

9. Data Retention

We retain your personal data for as long as your membership is active and for a reasonable period thereafter for record-keeping purposes, unless a longer retention period is required by law.

10. Children's Privacy

Our services are intended for university students (typically 18 years and older). We do not knowingly collect personal information from children under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• support@aecas.co.ke
• +254 713077328
• Technical University of Kenya, Haile Selassie Avenue, Nairobi