We apply Kenya’s Data Protection Act, 2019 as our primary framework and address additional regional duties where they apply to an engagement or individual.
Who we are and scope
Dynamik People & Performance Consultants (DPPC), based in Mombasa, Kenya, determines how personal data is used when you visit this website, enquire, book a service, create an account, build or import a CV, apply for an opportunity, or enrol in training.
This policy applies to website visitors, individual and organisational clients, candidates and portal users. Our Data Protection Statement explains the regional framework in more detail.
Personal data we collect
- Identity and contact: name, email, phone, location, organisation and account identifiers.
- Professional and careers: CV content, profile photo when supplied or extracted from an uploaded CV, employment, education, skills, certifications, application notes and training activity.
- Engagement and transaction: service interests, sector, headcount, dates, billing region, selected payment method, quotes, invoices and payment status. DPPC does not receive or store your complete PayPal or card credentials.
- Technical and usage: session identifiers, pages and checkout steps viewed, device or browser information, and configured analytics or advertising events.
- Communications: enquiries, briefs, support messages, application correspondence and follow-up history.
How we obtain data
We receive data from you, your organisation, your uploaded CV, your Google account when you choose Google sign-in, and from interactions with our website. We may also receive candidate information from a referring client or authorised recruitment source and will provide or direct you to an appropriate notice where required.
Why and on what basis we use it
- To answer enquiries, prepare proposals, deliver contracts, manage accounts, applications, training and payments.
- To take steps you request before a contract, perform a contract, comply with legal and tax duties, and pursue legitimate interests such as service security, administration and improvement.
- With consent where consent is the appropriate basis, including optional marketing or non-essential measurement where required. You may withdraw consent without affecting earlier lawful processing.
- To assess candidates only for relevant recruitment, placement or development purposes. DPPC does not represent that a portal profile or application guarantees employment.
International transfers
Some service providers or regional engagements may process data outside Kenya. Where applicable, DPPC seeks to use a legally permitted transfer basis and appropriate safeguards, such as equivalent protection, contractual controls, or informed consent. We assess the destination, purpose and sensitivity before a transfer and do not claim a specific transfer mechanism unless it is in place for that engagement.
Retention and deletion
We retain data only while needed for the stated purpose, legal obligations, dispute handling and legitimate business records. Account and active-client information is retained while the relationship continues; financial records may be retained for the period required by Kenyan tax and accounting law; unsuccessful candidate records are periodically reviewed and removed or anonymised when no longer needed.
You may request deletion. We may keep limited information where the law requires it or where necessary to establish, exercise or defend legal claims.
Security and automated processing
DPPC uses proportionate access controls, authentication, secured service providers and operational safeguards. No online system is risk-free. CV extraction may automatically structure text and a profile image to help populate your record; you can review and edit the result. We do not use that extraction alone to make a final employment decision.
Your choices and rights
Subject to applicable law, you may ask to be informed, access your data, correct it, object to or restrict processing, withdraw consent, request deletion, and challenge solely automated decisions. Some jurisdictions also provide portability rights.
Send a request to support@dppc.co.ke. We may verify your identity. Kenyan data subjects may also complain to the Office of the Data Protection Commissioner.
Children, updates and contact
Our general website and careers services are not directed to children. We require appropriate parent or guardian involvement where a lawful youth programme involves a minor.
We may update this policy when services or laws change. Material changes will be shown by a new review date. This policy explains current practices; it is not a certification or guarantee of compliance in every jurisdiction.
Questions or rights requests? Email support@dppc.co.ke or call +254 720 695 231.