Data Privacy Statement

Tutorials Kenya (https://www.tutorials.co.ke) is committed to protecting the privacy, confidentiality, and security of personal data submitted by customers who request our KRA related services. This Data Privacy Statement applies to the KRA PIN Number and KRA PIN Certificate services, collectively referred to as Retrieval of KRA PIN Certificate.

We uphold the principles of lawful, fair, transparent, and secure processing of personal data in accordance with the Data Protection Act, No. 24 of 2019 and its Regulations. This Statement explains the personal data we collect, how it is used and shared, the safeguards we apply, and your rights as a data subject in Kenya.

It should be read together with our Privacy Policy and Terms and Conditions. Where any inconsistency arises, this Data Privacy Statement shall prevail.

1. Definitions

• Tutorials Kenya

An independent online platform providing informational guides and paid assistance services related to KRA PIN Registration, Retrieval, Updates, and KRA Returns for customers in Kenya.

• Data Protection Officer (DPO)

The person designated to oversee compliance with the Data Protection Act and related regulations.

• Personal Data

Any information that identifies you directly or indirectly, including your name, ID number, contact details, or unique identifiers.

• Sensitive Personal Data

Data as defined under the Data Protection Act, including but not limited to biometric, genetic, health, or gender-related information.

• Processing

Any operation performed on personal data, including collection, storage, use, disclosure, retrieval, alignment, restriction, erasure, or destruction.

• Third Party

Any person or entity other than you and Tutorials Kenya that is authorized to process personal data on our behalf.

• Data Collection

The gathering of personal information submitted through our website forms, communication channels, or service requests.

2. Data Collection and Use

We collect personal data directly from you when you interact with our website or request our services. We may also collect limited technical data automatically for security, analytics, and performance purposes.

Personal data we may collect includes:

• Identity Data: Names and National ID Number
• Contact Data: Email address and Phone number
• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on the site, clicks and interaction patterns
• Payment Data: M-Pesa transaction references related to service fees

We use your personal data to:

• Process and fulfill submitted service requests
• Deliver Retrieval of KRA PIN Certificate services accurately
• Communicate service updates and respond to customer inquiries
• Improve website functionality, security, and performance
• Conduct internal analytics and operational improvements
• Send communications where you have provided consent

Personal data is processed only where there is a lawful basis, including your consent, performance of a service contract, compliance with legal obligations or legitimate business interests permitted under Kenyan law.

3. Data Sharing and Disclosure

We do not sell, rent, or trade personal data for marketing purposes.

Personal data may be shared only in the following circumstances:

a. Authorized Service Providers

We may engage trusted third-party service providers who support technical operations or service delivery. Such parties are bound by confidentiality obligations and required to apply appropriate data protection safeguards.

b. Legal or Regulatory Obligations

We may disclose personal data where required by Kenyan law, court order, or lawful request from regulatory or law enforcement authorities, subject to authorization by the Data Protection Officer.

c. Business Transitions

In the event of restructuring, merger, acquisition, or transfer of assets, personal data may be transferred to a successor entity, subject to continued protection under this Statement.

4. Data Security

Tutorials Kenya implements appropriate technical, organizational, and administrative measures to safeguard personal data against unauthorized access, loss, misuse, alteration, or destruction.

These measures include:

• Encryption of sensitive data in transit and at rest
• Restricted access controls and authentication mechanisms
• Continuous monitoring, security testing, and system updates
• Staff awareness and training on data protection obligations

Both electronic and physical data storage systems are protected using reasonable and proportionate security safeguards.

5. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable Kenyan laws and regulatory requirements.

Retention periods are determined based on:

• Nature and sensitivity of the data
• Purpose of processing
• Legal and regulatory obligations
• Internal operational requirements

You may request deletion of your personal data in accordance with the Data Protection Act. Each request will be assessed to ensure compliance with legal and regulatory obligations.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve user experience, enhance functionality, and analyze website performance.

Cookies may be used to:

• Recognize returning visitors
• Store user preferences
• Monitor usage and traffic patterns
• Support website security

You may control cookie preferences through your browser settings. Disabling cookies may limit access to certain site features.

Our website may contain links to third-party websites. Tutorials Kenya is not responsible for the privacy practices of external sites once you leave our platform.

7. Your Rights as a Data Subject

Under the Data Protection Act, you have the right to:

• Access personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of personal data under lawful conditions
• Object to certain types of processing
• Withdraw consent where processing is based on consent
• Request data portability where applicable

Requests to exercise these rights may be submitted using the contact details below.

8. Changes to This Data Privacy Statement

Tutorials Kenya may update this Statement periodically to reflect legal, regulatory, or operational changes. Updated versions will be published on this page with a revised effective date. Continued use of our services constitutes acceptance of the updated Statement.

9. Contact Information

For questions, concerns, or to exercise your data protection rights, contact our Data Protection Officer:

Email: [email protected]

We will respond in accordance with the Data Protection Act and applicable regulations.

Last Updated: 29th December, 2025