Scientists of Kenya Association (SCOKA)
Effective date: 19 August 2026 · Last updated: 19 August 2026
The Scientists of Kenya Association (SCOKA) is a duly registered association under the Societies Act, Cap 108 Laws of Kenya. We are a professional scientific association that brings together scientists, researchers, students, innovators and professionals from diverse scientific disciplines to advance science, research, technology and innovation in Kenya.
Data Controller: Scientists of Kenya Association (SCOKA)
Website: scoka.co.ke
Email: info@scoka.co.ke
ODPC Registration ID: 676-8639-BBDF
This Privacy Policy explains how we collect, use, store, share and protect your personal data, and sets out your rights as a data subject under the Kenya Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021.
We only collect personal data that is necessary for a specific, legitimate purpose. The table below summarises the categories of data we collect, the purpose, and the lawful basis under Section 30 of the Data Protection Act.
| Data collected | Collection point | Purpose | Lawful basis |
|---|---|---|---|
| Full name, gender, date of birth, nationality | Membership application | Creating and managing your SCOKA member account | Contract / consent |
| Email address, phone number | Membership application, contact form, newsletter sign-up, event registration | Communications, membership correspondence, event logistics | Contract / consent |
| National ID number | Membership application | Identity verification as required for official registration | Legitimate interests / legal obligation |
| Educational qualification, scientific speciality, department, employer | Membership application | Determining membership category; connecting members with relevant programmes | Contract / consent |
| Passport photograph, certificate scans, ID document scans | Membership application (file uploads) | Identity verification; issuing membership credentials | Contract / consent |
| M-Pesa transaction reference, payment amount | Membership application, membership renewal | Verifying payment and issuing membership | Contract / legal obligation |
| MyScoka password (hashed) | Membership application | Securing your member portal account | Contract |
| Name, email address, message | Contact form | Responding to your enquiry | Legitimate interests / consent |
| Email address | Newsletter subscription | Sending SCOKA news, events and updates you subscribed to | Consent |
| Name, email address, event-specific details | Event registration | Processing event participation; logistics and communications | Contract / consent |
| IP address, browser type, pages visited, session data | Automatically — website cookies & analytics | Understanding how visitors use the site; improving content and performance | Legitimate interests (GA4, production only) |
We do not collect special categories of personal data (health, biometric, racial/ethnic origin, political opinion, religious belief, etc.) unless expressly required and with your explicit consent.
Our website uses Google Analytics 4 (GA4) on the live site (scoka.co.ke) to collect anonymised usage data — page views, session duration, device type and approximate location (country/city level). GA4 uses first-party cookies. No analytics tracking runs on local/development environments.
We also use a session cookie to keep you logged in to the MyScoka member portal. This cookie is strictly necessary and does not track behaviour across other websites.
You may disable cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the website. Disabling the session cookie will prevent you from staying logged in to the member portal.
We use your personal data only for the purposes for which it was collected. Specifically:
We will not use your data for automated decision-making or profiling that produces significant legal effects on you without your explicit consent.
Under Section 30 of the Data Protection Act, 2019, we rely on the following lawful bases:
We do not sell, rent or trade your personal data. We share data only where necessary:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Brevo (Sendinblue) | Sending transactional and newsletter emails on our behalf | Data Processing Agreement in place; GDPR-compliant |
| Google LLC (GA4) | Anonymised website analytics | Google Ads Data Processing Terms; data minimisation enabled |
| Safaricom (M-Pesa) | Payment processing (STK push & paybill verification) | Licensed payment provider under CBK; regulated by Kenyan law |
| Web hosting provider | Server infrastructure on which the site and database run | Access-controlled servers; data stored within compliant infrastructure |
All third-party processors are required to handle your data only on our documented instructions and to maintain appropriate security measures. Where data is processed outside Kenya, we ensure adequate safeguards are in place as required by Section 48 of the Data Protection Act.
| Data type | Retention period | Reason |
|---|---|---|
| Member account data (name, email, ID, qualifications) | For the duration of membership + 3 years after lapse | Membership records for a registered society; legal obligation |
| Payment records (transaction references) | 7 years | Financial record-keeping in line with Kenyan tax and accounting law |
| Uploaded documents (ID scans, certificates, photos) | Duration of membership + 1 year | Membership verification; deleted upon confirmed account closure |
| Newsletter subscribers | Until you unsubscribe | Consent-based; list cleaned periodically |
| Contact form submissions | 12 months | For reference; deleted in routine data purges |
| Event registration data | 2 years after the event | Programme records; reporting |
| Website analytics (GA4) | 14 months (GA4 default) | Performance monitoring |
When data is no longer required, it is securely deleted or anonymised.
We take data security seriously and implement appropriate technical and organisational measures, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner within 72 hours of becoming aware, and will notify affected individuals without undue delay, as required by Section 43 of the Data Protection Act.
Under the Data Protection Act, 2019 (Sections 26–35), you have the following rights:
To know what data we collect and how it is used — this Privacy Policy fulfils that obligation.
To request a copy of the personal data we hold about you.
To have inaccurate or incomplete data corrected.
To request deletion of your data where we no longer have a lawful basis to hold it.
To object to processing based on legitimate interests, or to unsubscribe from marketing at any time.
Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To receive your data in a structured, commonly used format where technically feasible.
We do not use automated decision-making with significant legal effects on individuals.
To exercise any of these rights, contact us at info@scoka.co.ke with your full name and the nature of your request. We will respond within a reasonable time and, where required by law, free of charge.
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC):
We send newsletters and updates only to people who have explicitly subscribed. Each newsletter includes a clearly visible unsubscribe link. You may also unsubscribe at any time by emailing info@scoka.co.ke.
Unsubscribing from the newsletter does not affect other communications related to your membership or event registrations.
SCOKA membership and services are intended for individuals aged 16 and above. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If you believe a child's data has been submitted to us without appropriate consent, please contact us immediately at info@scoka.co.ke and we will delete it promptly.
Programmes that engage younger participants (e.g. Sayansi Kwa Watoto) are conducted in partnership with schools and parents/guardians, and any personal data collected in that context is handled with appropriate parental consent.
Our website may contain links to external websites, partner organisations, events and social media platforms. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data to them.
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.
Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.
For any privacy-related questions, requests, or concerns, please reach out to us:
We are committed to resolving any concerns you may have about the way we handle your personal data.
© 2026 Scientists of Kenya Association (SCOKA). This Privacy Policy is governed by the laws of Kenya.