Privacy Policy

The Kenya Association for Certified Training Providers for Industry ("KACET", "we", "us", or "our") is committed to protecting the privacy and personal data of everyone who interacts with us, including artisans, training institutions, counties, donors, partners, and visitors to our website www.kacet.co.ke (the "Site").

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you under the Kenya Data Protection Act, 2019 ("the Act") and its subsidiary regulations.

By using the Site, submitting an application, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy.

Data Controller: Kenya Association for Certified Training Providers for Industry (KACET)

KACET is registered (or in the process of registering) as a data controller and/or data processor with the Office of the Data Protection Commissioner (ODPC), Kenya, as required under the Act.

We collect personal data directly from you, and in limited cases from partner institutions, counties, or donors acting on your behalf. The categories of data we collect include:

3.1 Website Usage Data

• IP address, browser type, device information, and general location
• Pages visited, time spent on the Site, and referring pages
• Information collected through cookies and similar tracking technologies (see our Cookie Policy)

3.2 Contact and Enquiry Data

• Name, email address, and phone number submitted through contact or enquiry forms
• The content of any message you send us

3.3 Application, Certification, and Membership Data

When you apply for training, assessment, or certification through our Application Form, we collect:

• Programme selection: sector, preferred programme/course, intake period, and study preference
• Personal identification details: full name, National ID or passport number, date of birth, gender, and nationality
• Contact and location details: county, sub-county, ward, postal address, physical address, phone number, WhatsApp number, and email address
• Educational background: highest level of education, school/institution attended, year completed, grades, and any relevant certifications or prior training
• Skills and employment information: current employment status, work experience, technical/practical skills, motivations, and career goals
• Emergency contact details: full name, relationship, phone number, email, and physical address of your nominated emergency contact
• Your digital signature and declaration confirming the accuracy of the information provided

Some of this data (such as National ID number, date of birth, gender, and nationality) is treated as personal data requiring particular care, and in limited instances may be considered sensitive personal data under the Act. We collect it only to the extent necessary to verify identity, assess eligibility, and coordinate certification with our partner bodies.

3.4 Partner and Institutional Data

• Contact and organisational details of training institutions, county officials, donors, and industry partners who engage with KACET

We process personal data for the following purposes, consistent with the principles of lawfulness, fairness, and transparency set out in the Act:

• To process and assess applications for training, Recognition of Prior Learning (RPL), assessment, and certification
• To verify identity and eligibility for programmes and certification
• To communicate with you about your application status, programme information, and certification outcomes
• To coordinate certification and examination processes with our accredited partner bodies, including the National Industrial Training Authority (NITA), the Curriculum Development, Assessment and Certification Council (CDACC), and the Technical and Vocational Education and Training Authority (TVETA)
• To conduct Training Needs Assessments (TNA) with counties and donors
• To maintain records of membership and registered training institutions
• To contact your emergency contact only where genuinely necessary, such as a medical or safety emergency during training or assessment
• To improve and maintain the Site, and understand how it is used
• To comply with our legal, regulatory, and reporting obligations
• To detect, prevent, and investigate fraud, misrepresentation, or misuse of our services

We rely on one or more of the following legal bases under the Act to process your personal data:

• Consent — such as the consent you provide when submitting the Application Form declaration
• Performance of a process you have requested — such as processing your application for certification
• Compliance with a legal obligation — including obligations to regulatory and certifying bodies
• Legitimate interests pursued by KACET — such as improving our services, provided these interests do not override your rights and freedoms
• Protection of vital interests — such as contacting your emergency contact in a genuine emergency

We do not sell your personal data. We may share personal data with:

• Accredited certification and regulatory partners (NITA, CDACC, TVETA) for the purposes of assessment, examination, and issuance of nationally recognised certification
• Training institutions registered as KACET associates, where relevant to your application or placement
• Counties and donor partners, in aggregated or anonymised form, for training needs assessments and reporting, unless your explicit consent is obtained for identifiable sharing
• Service providers who support our operations, such as website hosting, email, and IT service providers, under confidentiality obligations
• Regulatory or law enforcement authorities where required by law

Where we engage third-party service providers, we take reasonable steps to ensure they apply data protection standards consistent with the Act.

Where personal data is processed or stored outside Kenya (for example, by cloud-based hosting or software providers), we take reasonable steps to ensure such transfers comply with the cross-border data transfer requirements of the Act, including verifying that the recipient jurisdiction or organisation provides an adequate level of data protection.

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including any legal, accounting, or reporting requirements. Application and certification records are generally retained for the duration of your relationship with KACET and for a reasonable period afterward to support verification of certification, after which data is securely deleted or anonymised, unless a longer retention period is required by law.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures include restricted access to application records, secure storage systems, and staff awareness of data protection obligations. While we take reasonable steps to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our services are generally intended for individuals who meet the eligibility requirements of our training and certification programmes. Where an applicant is a minor, we require that a parent or guardian be involved in the application and provide any necessary consent. We do not knowingly collect personal data from children through the Site without appropriate parental or guardian consent.

Our Site uses cookies and similar technologies to operate effectively and understand how visitors use the Site. Full details are set out in our separate Cookie Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this Privacy Policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: