At GuruIT, we prioritize the privacy and security of our clients’ personal data. As a trusted IT service provider, we are committed to upholding the highest standards of data protection in compliance with the relevant Data Protection Act (DPA) and other applicable regulations, such as the General Data Protection Regulation (GDPR).

Our Commitment to Data Protection

We have implemented comprehensive policies and procedures to ensure that personal data is handled with the utmost care and in accordance with legal requirements. Here’s how we ensure data protection compliance:

Key Principles We Follow

  1. Lawfulness, Fairness, and Transparency
    • We process personal data legally and fairly. We maintain transparency with our clients about how their data is collected, used, and stored.
  2. Purpose Limitation
    • Personal data is collected for specific, legitimate purposes and is not processed further in ways that are incompatible with those purposes.
  3. Data Minimization
    • We only collect and process data that is necessary and relevant to achieve the intended purpose.
  4. Accuracy
    • We ensure that personal data is accurate and kept up to date. We take immediate action to correct any inaccuracies.
  5. Storage Limitation
    • Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected. We have robust data retention policies in place.
  6. Integrity and Confidentiality
    • We employ advanced security measures to protect personal data against unauthorized access, accidental loss, destruction, or damage.
  7. Accountability
    • We take responsibility for complying with data protection principles and maintain records to demonstrate our compliance.

Your Rights

As part of our commitment to data protection, we ensure that individuals can exercise their rights regarding their personal data:

  • Right to be Informed: You have the right to be informed about the collection and use of your personal data.
  • Right of Access: You can access your personal data and obtain information about how it is processed.
  • Right to Rectification: You have the right to have inaccurate or incomplete data corrected.
  • Right to Erasure: Also known as the “right to be forgotten,” you can request the deletion of your personal data.
  • Right to Restrict Processing: You can request the restriction of your data processing under certain conditions.
  • Right to Data Portability: You can obtain and reuse your personal data across different services.
  • Right to Object: You can object to the processing of your personal data in specific situations.
  • Rights Related to Automated Decision Making and Profiling: You have the right not to be subject to decisions based solely on automated processing.

Our Security Measures

At GuruIT, we deploy cutting-edge security technologies and practices to protect your personal data. This includes:

  • Encryption: Data is encrypted both in transit and at rest to safeguard it from unauthorized access.
  • Access Controls: We implement strict access controls to ensure that only authorized personnel can access personal data.
  • Regular Audits: We conduct regular security audits and assessments to identify and mitigate potential risks.
  • Training and Awareness: Our team undergoes regular training to stay updated on data protection best practices and regulatory requirements.

Contact Us

If you have any questions about our data protection practices or wish to exercise your rights, please contact us at info@guruit.co.ke. We are here to help and ensure that your data is handled with the highest level of care and compliance.