Data Protection
Registered with the Office of the Data Protection Commissioner, Kenya.
Registered Data Controller
NIBS Technical College is fully registered as a Data Controller with the Office of the Data Protection Commissioner (ODPC), Kenya, in accordance with the Data Protection Act, 2019. Our registration details are available on request — please contact us via the details below.
Data Protection Principles We Follow
In line with Section 25 of the Data Protection Act, 2019.
Lawfulness & Fairness
We process personal data lawfully, fairly, and transparently.
Purpose Limitation
Data is collected for specified, explicit, and legitimate purposes only.
Data Minimization
We only collect what is adequate, relevant, and necessary.
Integrity & Confidentiality
Data is processed with appropriate security against unauthorized access.
Storage Limitation
We retain personal data only as long as necessary for its purpose.
Accountability
We take responsibility for demonstrating compliance with these principles.
Categories of Personal Data We Process
- Contact details you submit via our contact form (name, email, phone number)
- Correspondence content (the message you send us)
- Technical/usage data collected automatically via Google Analytics (IP address, browser, device, pages visited)
Your Rights as a Data Subject
Under Section 26 of the Data Protection Act, 2019, you have the right to:
- Be informed of the use to which your personal data is to be put
- Access personal data held about you
- Request the correction of inaccurate or outdated personal data
- Request the deletion of false or unlawfully obtained personal data
- Object to processing of all or part of your personal data
- Restrict processing of your personal data in certain circumstances
How to Exercise Your Rights
To exercise any of the rights above, contact our team via our contact page or by emailing info@nibs.ac.ke, with the subject line "Data Protection Request." We will respond within a reasonable timeframe as required by law.
Security Measures
Our website is served exclusively over HTTPS, uses industry-standard security headers, and our contact form is protected against spam, header-injection, and cross-site submission through server-side validation, honeypot detection, and per-IP rate limiting. Access to any personal data received through this website is restricted to staff who need it to respond to your enquiry.
Right to Lodge a Complaint
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Office of the Data Protection Commissioner, Kenya, in addition to (or instead of) contacting us directly.
Have a Data Protection Concern?
Reach out to our team — we're here to help.