Privacy Policy

Effective Date: January 2020
Last Updated: January 2022

The University of Eldoret (“University”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of visitors, students, staff, partners, and all users of our websites. This Privacy Policy explains how we collect, use, store, and protect personal information across the domain uoeld.ac.ke and all its subdomains.

By accessing or using our websites, you agree to the practices described in this policy.

1. Scope of this Policy

This Privacy Policy applies to:

The main website: https://uoeld.ac.ke
All official University subdomains (e.g., student portals, staff portals, learning systems, event sites, research sites, profiles, application portals, and service systems)
Any online services operated under the University of Eldoret domain

This policy does not apply to external websites linked from our pages.

2. Information We Collect

We may collect and process the following types of information:

Personal Information You Provide
1. Full name
2. Email address
3. Phone number
4. Student or staff identification details
5. Application or registration information
6. Contact or inquiry form submissions
Automatically Collected Information
1. IP address
2. Browser type and device information
3. Pages visited and time spent
4. Cookies and usage analytics
System and Service Data
1. Login credentials for portals and LMS
2. Academic or administrative records where applicable
3. Communication preferences

3. Purpose of Data Collection

We collect personal data to:

Provide academic, administrative, and online services
Process applications, registrations, and inquiries
Manage student, staff, and stakeholder accounts
Communicate official announcements
Improve website performance and user experience
Maintain system security and prevent fraud
Comply with legal and regulatory obligations

4. Legal Basis for Processing

We process personal data based on:

Consent provided by the user
Performance of a contract or service
Legitimate institutional interest
Compliance with the Kenya Data Protection Act, 2019

5. Cookies and Tracking Technologies

Our websites may use cookies to:

Enhance user experience
Maintain user sessions
Analyze website traffic and performance

Users may disable cookies through browser settings, though some services may not function properly.

6. Data Sharing and Disclosure

We do not sell personal data. Information may be shared:

Internally within University departments
With service providers supporting University systems
With regulatory or law enforcement authorities where required by law

All third parties handling data are required to maintain confidentiality and security.

7. Data Storage and Security

We implement appropriate technical and organizational measures to protect personal data, including:

Secure servers and access controls
Encrypted connections where applicable
Restricted administrative access

While we strive to protect data, no system is completely secure, and users share information at their own risk.

8. Data Retention

Personal data is retained only for as long as necessary to fulfill its intended purpose or meet legal and institutional requirements. Data may be archived or securely deleted thereafter.

9. User Rights

Under the Kenya Data Protection Act, you have the right to: