This Privacy Policy is meant to help you understand what information we collect, why we collect it, and how you can update, manage, export, and delete your information.

When using the Services, you will be asked to indicate your acknowledgment of, and where applicable, give your consent to the practices described in this Privacy Policy.

The words of which the initial letter is capitalised have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

• Account means a unique account created for You to access our Service or parts of our Services.
• Affiliate means an entity that controls is controlled by or is under common control with a party, whereas “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Application means the software program provided by the Organisation downloaded by You on any electronic device, named Casualty App
• Country refers to Kenya
• Data Controller refers to the Organisation as the legal person who, alone or jointly with others, determines the purposes and means of processing Personal Data.
• Device means any device that can access the Service, such as a computer, a cell phone or a digital tablet.
• Organisation (referred to as either “the Organisation”, “We”, “Us”, or “Our” in this Agreement) refers to Emergency Medicine Kenya Foundation, Park Place Business Centre, Park Place Building, 2nd Floor 2nd Parklands Avenue off Limuru Road, Nairobi, Kenya.
• Personal Data is any information that relates to an identified or identifiable individual.
• Services refer to the Organisation’s  services, platforms, applications, and sites 
• Service Provider means any natural or legal person who processes the data on behalf of the Organisation. It refers to third-party companies or individuals employed by the Organisation to facilitate the Service, to provide the Service on behalf of the Organisation, to perform services related to the Service or to assist the Organisation in analysing how the Service is used.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• You means the individual accessing or using the Service, the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

• Information regarding your location

• To provide and maintain our Application, including monitoring the usage of our Application.
• To manage Your Account: to manage Your registration as a user of the Application. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
• For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Application.
• To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application’s push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
• To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
• To manage Your requests: To attend and manage Your requests to Us.
• For Organisation transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganisation, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Application users is among the assets transferred.
• For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

• With Service Providers: We may share Your personal information with Service Providers to monitor and analyse the use of our Application to contact You.
• For Organisation transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Organisation assets, financing, or acquisition of all or a portion of Our Organisation to another company.
• With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honour this Privacy Policy. Affiliates include any subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
• With Organisation partners: We may share Your information with Our Organisation partners to offer You certain products, services or promotions.
• With other users: when You share personal information or otherwise interact in public areas, such information may be viewed by all users and publicly distributed outside.
• With Your consent: We may disclose Your personal information for any other purpose with Your consent.

• Comply with a legal obligation
• Protect and defend the rights or property of the Organisation
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

• Right to be informed of the use to which their Personal Data is to be put: You have a right under the Kenya Data Protection Act 2019 to be informed of the nature of the processing in simple and clear language that is understandable;
• Right to access their Personal Data in the custody of the Organisation: You have a right to obtain access and information under the conditions provided in Kenya Data Protection Act. This means that you have the right to obtain confirmation from us as to whether we are processing your Personal Data. If so, you also have the right to obtain access to Personal Data and information. This includes information regarding the purposes of the processing, the categories of Personal Data that are being processed, and the recipients or categories of recipients to whom the Personal Data have been or will be disclosed.
• Right to object to processing all or part of their Personal Data: You have a right to object under the Kenya Data Protection Act, 2019. You have a right to object to processing your Personal Data unless EMKF demonstrates compelling legitimate interest for the processing which overrides your interests or for the establishment, exercise, or defence of a legal claim. To exercise your rights of objection, you may contact us at any time by sending an email to  emkf@emkfoundation.org.
• Right to correct false or misleading data: You have the right to rectification under the conditions provided in the Kenya Data Protection Act, 2019. This means that you have the right to receive from us without undue delay the rectification of inaccuracies in your Personal Data and completion of incomplete Personal Data.
• Right to deletion of false or misleading data about them: You have a right to erasure (“right to be forgotten”) under the conditions provided Kenya Data Protection Act, 2019. This means that you generally have the right to obtain from us the erasure of your Personal Data, and we are obliged to erase your Personal Data without undue delay. You can do this by deleting your account at any time. If we have made the Personal Data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers who are processing the Personal Data that you have requested the erasure by such controllers of any links to, or copy or replication of those Personal Data.
• Right to withdraw consent: You have the right to withdraw your consent at any time by notifying us by email to the following address:  emkf@emkfoundation.org. By withdrawing your consent, the lawfulness of the processing based on consent will not be affected until the point of withdrawal.
• Right to restriction of processing: You have a right to restriction of processing under the conditions provided in the Kenya Data Protection Act, 2019. This means that you have the right to obtain from us the restriction of the processing. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the Personal Data. Restriction means that stored Personal Data are marked with the goal of restricting their future processing.
• Right to data portability: You have a right to data portability under the conditions provided in Kenya Data Protection Act, 2019. This means that you generally have the right to receive your Personal Data with which you have provided us in a structured, commonly used, and machine-readable format and to transmit those data to another controller without hindrance from us. 
• Right to complain: As a data subject, you have a right to lodge a complaint with the Office of the Data Protection Officer or at the EMKF office,  emkf@emkfoundation.org.
• Right to withhold consent: You have the right to withdraw your consent to processing your Personal Data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. 

We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your Personal Data to those employees and other third parties who are determined. They will only process your Personal Data on our instructions, and they are subject to a duty of confidentiality.

While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security. We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.