Legal & Policy
Privacy Policy
Last updated: 5 September 2026
The Legislative Centre (“TLC”, “we”, “us” or “our”) respects the privacy of people who use our website, contact us, register for public updates or otherwise interact with TLC online. This Privacy Policy explains what personal data we may collect through this website, why we process it, how it may be used or shared, how long it may be retained, and the rights available to you.
This policy applies to the corporate TLC website (legislativecentre.org). TLC Academy and the Public Policy Platform are separate applications and display their own privacy notices where their processing activities materially differ from what is described here.
1. Who Is Responsible for Your Data?
The Legislative Centre is the data controller for personal data processed through this website.
- Registered address: Suite 218, Embassy House, Parliament Road, Nairobi, Kenya
- Privacy contact: privacy@legislativecentre.org
- General contact: info@legislativecentre.org
- Office of the Data Protection Commissioner (Kenya) registration particulars: to be confirmed and published here once TLC's registration is complete
2. Personal Data We May Collect
Information You Give Us
Depending on your interaction with the website, we may collect:
- name
- email address
- telephone number
- organisation
- enquiry category
- message or content submitted through forms
- event or subscription preferences
- Wajibika programme or subscription enquiries
Technical Information
This may include:
- IP address and related security information
- browser and device information
- timestamps
- pages requested
- error and security logs
- cookie or analytics identifiers, where enabled -- see our Cookie Policy
Search / Interactive Tools
Where you submit a website search or an Ask Parliament question, TLC may process that input to provide the requested service, secure the system and improve functionality. Please avoid entering unnecessary personal or confidential information into these public tools.
3. Why We Process Personal Data
We may process personal data to:
- respond to enquiries
- provide requested information
- manage subscriptions and preferences
- administer public events
- provide search or public digital tools
- secure and maintain the website
- improve website performance
- comply with legal obligations
- maintain appropriate institutional records
- prevent misuse or fraud
4. Lawful Basis
The applicable lawful basis depends on the specific activity, and may include your consent, steps you request before entering a contract, performance of a contract, compliance with a legal obligation, legitimate interests that do not override your rights, or other lawful grounds available under applicable Kenyan law. Consent is not the basis for every processing activity described in this policy -- each activity relies on whichever basis genuinely applies to it.
7. International Transfers
Where a service provider processes personal data outside Kenya, TLC uses the transfer basis and safeguards required by applicable Kenyan data-protection law. We do not claim that all data remains in Kenya, since our infrastructure providers' locations are not all independently verified for this statement.
8. Retention
TLC retains personal data only for as long as reasonably necessary for the purpose for which it was collected, applicable legal obligations, legitimate institutional record requirements, dispute management and security. TLC maintains an internal retention schedule; specific public retention periods will be published here as they are confirmed and stabilised.
9. Security
TLC uses reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or misuse. No internet or storage system can be guaranteed to be completely secure, and TLC continually reviews appropriate safeguards according to the nature of the information and processing involved.
10. Your Data-Protection Rights
Subject to applicable law, you may have the right to:
- be informed about the use of your personal data
- request access to your personal data
- request correction of your personal data
- object to processing
- request deletion or erasure, where applicable
- request restriction of processing, where applicable
- request portability, where applicable
- withdraw consent, where processing relies on consent
How to exercise your rights
Send a request to our privacy contact: privacy@legislativecentre.org
11. Complaints
If you have a concern about how TLC handles your personal data, please raise it with us first at privacy@legislativecentre.org. You may also raise a complaint with the Office of the Data Protection Commissioner (Kenya).
- Office of the Data Protection Commissioner (Kenya): www.odpc.go.ke
12. Third-Party Websites
TLC links to legislatures, public institutions, TLC Academy, the Public Policy Platform, video and media providers, and other external websites. This Privacy Policy governs the corporate TLC website only, and does not govern any independent third-party website.
13. Children
The corporate website does not intentionally solicit unnecessary personal data from children. Any TLC Academy activity involving children or minors, where applicable, is governed by the Academy's own appropriate consent and privacy controls and specific notice.
14. Changes to This Policy
We may update this policy from time to time. Material changes will update the date below and, where appropriate, receive additional notice.