Privacy Policy

1. Introduction

Drive Today Security Services (DTSS) ("we", "us", "our") is committed to protecting your privacy and handling your personal data in accordance with the Kenya Data Protection Act, 2019 and any regulations issued thereunder.

This policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over your data when you visit our website, use our services, or interact with us.

We are registered as a Data Controller and/or Data Processor (as applicable) with the Office of the Data Protection Commissioner (ODPC) in Kenya.

2. Information We Collect

We collect the following categories of personal data:

• Contact Data: Name, email address, phone number, company name, and address provided via our contact, quote, or application forms.
• Recruitment Data: CVs, certifications, cover letters, and background information submitted through our Careers page.
• Client Data: Information necessary for service delivery, contracts, invoicing, and site security management.
• Screening Data: With appropriate consent, identity documents, and verification data collected for background screening services.
• Technical Data: IP address, browser type, device information, and pages visited when you browse our website.

3. How We Use Your Data

We process your personal data to:

• Respond to inquiries and provide requested quotes and consultations;
• Deliver and manage contracted security services;
• Process job applications and conduct recruitment;
• Comply with legal and regulatory obligations (including PSRA, CBK, KCAA, and FATF-related requirements);
• Communicate service updates and important notices;
• Improve our website, services, and customer experience.

4. Legal Basis for Processing

Under the Data Protection Act, 2019, we process your data based on one or more of the following lawful grounds:

1. Consent — where you have given clear permission (e.g., submitting a form);
2. Contract — where processing is necessary to perform a contract with you;
3. Legal Obligation — where processing is required by Kenyan law;
4. Legitimate Interests — where processing is necessary for our legitimate business operations, provided your rights are not overridden.

5. Data Sharing & Transfers

We do not sell your personal data. We only share data with:

• Service providers (e.g., IT hosting, payroll) bound by data protection agreements;
• Regulators and authorities where legally required (e.g., ODPC, CBK, KCAA, law enforcement);
• Professional advisers (e.g., auditors, lawyers) under confidentiality obligations.

Where data is transferred outside Kenya, we ensure appropriate safeguards are in place in compliance with Section 49 of the Data Protection Act, 2019.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law (e.g., financial records retained for 7+ years under tax law). Data no longer required is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, staff training, and secure data storage. Our information security practices align with recognized standards, reflecting our commitment to being a security leader.

In the event of a data breach affecting your rights, we will notify the Office of the Data Protection Commissioner and affected data subjects as required by law.

8. Your Rights as a Data Subject

Under the Data Protection Act, 2019, you have the right to:

• Access — request a copy of the personal data we hold about you;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion of your data (subject to legal retention obligations);
• Restriction / Objection — object to or restrict certain processing;
• Data Portability — receive your data in a structured, commonly-used format;
• Lodge a Complaint — complain to the Office of the Data Protection Commissioner.

9. Cookies

Our website may use essential cookies to function properly and analytics cookies to understand site usage. You can control cookies through your browser settings. Continued use of the site constitutes acceptance of our cookie practices.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated on this page, and the "Last Updated" date will be revised accordingly.

11. Contact Our Data Protection Officer