Last Updated: 12 May 2026
The Chartered Institute of Taxation-Kenya ("the Institute," "we," "our," or "us") is committed to protecting your personal data. References to "You" and "Your" mean the person whose personal data is the subject of this policy.
This Policy describes how we collect, use, share, and protect your personal information in compliance with the Constitution, the Data Protection Act 2019 and any other applicable privacy laws in Kenya.
Personal data is information about an identifiable individual (a natural person) or by which a person’s identity can be reasonably determined such as name, address, phone number, and email address.
By accessing our website, registering for our services, attending our events, applying for membership or training programmes, or otherwise interacting with us, you acknowledge that you have read and understood this Policy.
Types of Information We Collect
We only collect personal information about you when you voluntarily choose to provide it. We collect information to better interact with you as well as information pertinent to our operations, which enables us to provide services, process payments and correspondence, and keep customers informed about our activities and products.
We collect, use, and retain various forms of personal information, including:
- Names, contact details, date of birth, educational qualifications, and employment history
- Photographs, recordings, or images obtained with your consent or during public events
- Correspondence, enquiries, complaints, and feedback
- Information submitted through forms, surveys, applications, or registrations
- Membership and professional affiliation information
- Publicly available information about you
- Other material and/or speeches authored or published by you
How we Collect Personal Information
We can collect information about you either from you directly, via your dealings with us, or indirectly from third parties or other sources. We may collect your personal information when you:
- Visit or use our website;
- Apply for membership, certification, training, or other programmes;
- Register for conferences, seminars, webinars, or events;
- Subscribe to newsletters or publications;
- Contact us through email, telephone, social media, or other communication channels; and
- Participate in surveys, competitions, or promotions.
Additionally, we may collect your information when you interact with our website or systems allowing us to collect, among others, IP address, browser type and version, device information, website usage information, cookies and tracking data, log and analytics information.
How We Use Your Information
We can use your information in various ways, including:
- To deliver our products and services, event invitations, newsletters, etc.
- Send relevant information, advertisements, updates, special offers and other marketing information to individuals on our mailing lists.
- Improve the site by monitoring how you use it.
- Gather feedback to improve our services, for example email alerts.
- Respond to any feedback you send to us.
- To comply with the law.
- For any other purposes we tell you about, or that you agree to, from time to time (including when we collect the relevant information).
Disclosing your Information
We value your information and won’t share your information with any other organizations for marketing, market research, or other purposes. However, we may disclose personal information to third parties such as to:
- Service providers and consultants that we engage
- Payment processors and financial institutions
- Technology, hosting, and cloud service providers
- Event organisers, trainers, facilitators, and accreditation partners
- Professional advisers including auditors, advocates, and accountants
- Government agencies, regulators, or law enforcement authorities where required by law
- Other persons where disclosure is authorised by you or permitted by law
We will only disclose your personal information:
- With your consent; or
- For a purpose which you would reasonably expect; or
- As required or permitted by law; or
- In accordance with this Policy.
We will not disclose your personal information to our business partners unless requested by you in writing.
How we Protect Your Personal Information
We implement a variety of reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, alteration, or destruction when you enter, submit, or access your personal information.
While we take reasonable steps to protect personal data, no method of electronic transmission or storage is completely secure.
How Long We Keep Your Data
We store, process, and retain your data only as long as it is required by the law or for the purpose for which we collected the information or resolve disputes and enforce agreements. After the retention period, we securely delete or anonymize the data.
Children
Our services are not directed to children without appropriate parental or guardian involvement where required by law. Where we become aware that personal data relating to a child has been collected unlawfully, we shall take appropriate steps to delete such data.
International Transfer of Personal Data
Where personal data is transferred outside Kenya, we shall ensure that appropriate safeguards are implemented in accordance with the Data Protection Act, 2019, including ensuring that the recipient maintains an adequate level of data protection.
Third Party Links
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of such linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
Cookies
We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Site to help customize the Website and improve your experience. You can typically remove or reject cookies via your browser settings. Please be aware that such action could affect the availability and functionality of the Website.
Your Rights
You have several rights under the Data Protection Act 2019 and other laws. You have the right to request that we amend or delete any personal information we collected and hold about you. If you’ve signed up for email updates, you can unsubscribe at any time. There is an unsubscribe option at the bottom of every email update.
If you wish to exercise any of these rights, you may contact us at the address below.
Terms and Conditions
Please also visit our Terms and Conditions section establishing the use, disclaimers, and limitations of liability governing the use of our website at https://www.citax.co.ke.
Changes to this Policy
We may update or revise this Policy to comply with regulatory or legal requirements, or to make it clearer, or to improve our practices. The latest version of the Policy is displayed on the website. Continued use of our site or services constitutes acceptance of the updated terms.
Complaints
If you have any questions, concerns, or comments about this privacy policy or have any requests concerning your personal data, please contact us at:
Chartered Institute of Taxation (Kenya)Nyaku House, 1st Floor, Rm 10
Arwings Kodhek Road
P.O. Box 21141-00100
Hurlingham, Nairobi
Phone: [Insert Phone Number]
Email: citax@gmail.com
Website: www.citax.org
We may ask you to put your complaint in writing or to supply further details about your complaint. We’ll try to resolve your complaint within a reasonable time.
If you aren’t satisfied with how we’ve handled your complaint, you can lodge a complaint with the Office of the Data Protection Commissioner at:
Office of the Data Protection CommissionerBritam Towers 12th Floor, Hospital Road
P.O Box 30920-00100 G.P.O
Upperhill, Nairobi
Phone: 0796954269 / 0752896867
Email: info@odpc.go.ke