Privacy Policy

Last updated: April 2026

1. Introduction

SHA Online Cyber Services Kenya ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform to access Social Health Authority (SHA) services. We operate in full compliance with the Kenya Data Protection Act (KDPA) 2019.

2. Information We Collect

We collect the following personal information to process your SHA service requests:

  • Identity information: Full name, National ID number, date of birth
  • Contact information: Phone number, email address
  • SHA-specific data: SHA PIN/member number, employment details
  • Documents: National ID copies, Police Abstracts, certificates (as required by specific services)
  • Payment information: M-Pesa transaction references (we do not store M-Pesa PINs)

3. How We Use Your Information

  • Processing your SHA service requests with the Social Health Authority
  • Communicating order status updates via SMS and email
  • Processing M-Pesa payments for our services
  • Providing customer support
  • Complying with legal and regulatory requirements

4. Data Security

All documents and personal data are encrypted using AES-256 encryption during storage and transmission. Uploaded documents are automatically deleted within 48 hours of successful processing. Our systems are hosted on secure, access-controlled infrastructure.

5. Data Retention

We retain your order records for a maximum of 12 months after service completion for customer support and dispute resolution. Uploaded documents (ID copies, police abstracts, etc.) are permanently deleted within 48 hours of processing completion. You may request early deletion at any time.

6. Your Rights

Under the KDPA 2019, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to the processing of your data
  • Receive your data in a portable format

To exercise these rights, contact us at support@shacyberservices.com.

7. Third-Party Sharing

We share your information only with the Social Health Authority (SHA) for processing your service requests and with Safaricom for M-Pesa payment processing. We do not sell, trade, or share your personal data with any other third parties.

8. Contact Us

For privacy-related inquiries, contact our Data Protection Officer at support@shacyberservices.com or via WhatsApp at +254 719 628 275.