INSTITUTE OF CERTIFIED PUBLIC ACCOUNTANTS OF KENYA
The Institute of Certified Public Accountants of Kenya (ICPAK, the Institute) is the statutory body established by the Accountants Act, Cap 531 in the Laws of Kenya (the Act), to develop and regulate the Accountancy Profession in Kenya. ICPAK is also a member of the International Federation of Accountants (IFAC), the global umbrella body for the accountancy profession and Pan African Federation of Accountants (PAFA).
The Institute is committed to protecting the privacy and personal data of all individuals who interact with us. We process personal data in accordance with the Constitution of Kenya, the Data Protection Act, 2019, the Data Protection (General) Regulations, 2021, and other applicable laws.
This Privacy Notice explains how we collect, use, store, disclose and protect your personal data when you visit our website, register as a member, attend our events, apply for employment, engage our services, or otherwise interact with the Institute.
Who We Are
The Institute is registered as both a Data Controller and Data Processor by the Office of the Data Protection Commissioner, responsible for the personal data processed through this website and other Institute services.
For any questions regarding this Privacy Notice or the processing of your personal data, please contact:
Personal Data We Collect
Depending on your interaction with the Institute, we may collect:
- Name and contact details
- National ID/Passport Number
- KRA PIN
- Membership information
- Employer and professional details
- Academic and professional qualifications
- Financial and payment information
- Photographs, images and video recordings
- Correspondence submitted to ICPAK
- Website usage information and technical identifiers
- Recruitment information
- Supplier and contractor information
- Information required to comply with legal and regulatory obligations
Where necessary and permitted by law, we may also process sensitive personal data.
How We Collect Your Personal Data
We collect personal data directly from you when you:
- Register as a member
- Apply for employment
- Register for training or events
- Submit enquiries or complaints
- Subscribe to newsletters
- Complete online forms
- Participate in surveys
- Engage with our digital platforms
- Visit our offices
- Interact with us through telephone, email or social media
We may also receive personal data from third parties where permitted by law.
Purpose of Processing
We process personal data for purposes including:
- Membership registration and administration
- Regulation of the accountancy profession
- Delivery of professional services
- Examination and training administration
- Event management
- Customer service and communication
- Recruitment and employment
- Procurement and supplier management
- Financial management
- Legal and regulatory compliance
- Website administration
- Security and fraud prevention
- Protection of ICPAK’s legitimate interests
- Any other lawful purpose communicated to you at the time of collection.
Legal Basis for Processing
We process personal data based on one or more of the following lawful grounds:
- Compliance with a legal obligation
- Performance of a contract
- Legitimate interests pursued by ICPAK
- Consent, where required
- Protection of vital interests
- Performance of a public task or statutory mandate
Sharing of Personal Data
The Institute may share personal data with:
- Government agencies and regulators
- Financial institutions
- Service providers acting on our behalf
- Professional consultants
- External auditors
- Technology service providers
- Law enforcement agencies where required by law
- Other parties where disclosure is authorised or required by law.
All third parties processing personal data on behalf of the Institute are required to implement appropriate safeguards to protect such information.
International Transfers
Where personal data is transferred outside Kenya, the Institute will ensure that appropriate safeguards are implemented in accordance with the Data Protection Act, 2019.
Data Security
The Institute implements appropriate technical and organisational measures to safeguard personal data against unauthorized access, loss, misuse, alteration or disclosure. These measures include access controls, encryption where appropriate, secure systems, staff awareness, and continuous monitoring of our information systems.
Retention of Personal Data
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law, regulatory requirements, contractual obligations, and our records retention schedule.
When personal data is no longer required, it is securely disposed of, pseudonymised or anonymized
Your Rights
Subject to applicable law, you have the right to:
- Be informed about the processing of your personal data.
- Access your personal data.
- Request correction of inaccurate or incomplete personal data.
- Request deletion of your personal data where applicable.
- Object to or restrict certain processing activities.
- Withdraw consent where processing is based on consent.
- Request portability of your personal data where applicable.
- Lodge a complaint with ICPAK or the Office of the Data Protection Commissioner (ODPC).
Cookies and Website Analytics
Our website may use cookies and similar technologies to improve user experience, analyse website usage, and enhance our services. You may configure your browser to refuse cookies; however, some website functionality may be affected. You may access our cookies policy through https://www.icpak.com/cookie-policy-2/
Third-Party Websites
Our website may contain links to external websites. The Institute is not responsible for the privacy practices or content of third-party websites.
Changes to this Privacy Notice
The Institute may update this Privacy Notice from time to time to reflect changes in legislation, technology or our processing activities. The latest version will always be published on our website.
Contact Us
If you have any questions regarding this Privacy Notice or wish to exercise your rights under the Data Protection Act, please contact:
Data Protection Officer
Institute of Certified Public Accountants of Kenya
Email: dataprotection@icpak.com
Website: www.icpak.com
