Data protection
Privacy notice
Version 1.0Effective 3 OCT 2026
How KAMMP handles your personal data under the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021. Version 1.0, effective 3 Oct 2026.
Who we are
The data controller is the Kenya Association of Muslim Medical Professionals (KAMMP), Adams Arcade, Ngong Road, Office no 3, Nairobi, P.O. Box 22752-00505.
What we collect
- Your name, title, contact details and county, given when you apply.
- Your professional details: cadre, career stage, specialty, employer, regulator and registration number.
- Your membership record: category, branch, status, subscriptions, receipts and CPD.
- A photograph and short biography, which the Membership Committee requires with an application.
- Records of what you do in your account, kept so the association can show who did what.
Why, and on what basis
Membership processingLawful basis: Contract
Processing your application, keeping your membership record, collecting subscriptions and issuing your card. Required to be a member.
Public member directoryLawful basis: Consent
Listing you in the public directory with only the fields you choose. Optional, and you can withdraw it at any time in your portal.
Credential verificationLawful basis: Consent
Letting an accredited insurer or employer confirm your membership status and validity, never your contacts or any clinical record. Optional and withdrawable.
- We do not sell or rent personal data.
- We never give sponsors or exhibitors a delegate list; they receive aggregate reports only.
- This platform holds no patient or clinical records.
Your rights
- Access: a copy of the personal data we hold about you and how it is used.
- Correction of data that is inaccurate, out of date, incomplete or misleading.
- Erasure of data the association is not obliged or entitled to keep.
- Objection to a particular use of your data.
- Restriction: pausing processing while a dispute about the data is resolved.
Signed-in members can make a request from Privacy in the portal. Anyone else can write to the secretariat. Privacy in your portal.
How long we keep it
Contact details, directory listings, optional profile details and preferences can be erased on request. The membership register, financial records, governance decisions and CPD records are kept because the association must be able to show who its members were, what money moved and what its organs decided.
Complaints
If you are not satisfied with our answer you may complain to the Office of the Data Protection Commissioner.
