Privacy Policy

Lab Medicine Society of Kenya ("LMSK", "we", "us" or "our") respects your privacy and is committed to protecting the personal data of members, website visitors and course participants in accordance with the Data Protection Act, 2019 of Kenya. This Privacy Policy explains what information we collect, why we collect it, and how it is used and protected.

Information We Collect

When you register as a member or use our Services, we collect information such as your full name, national identification number, professional license/registration number, education details, email address, phone number, a passport photo, and your signature. When you make a payment through M-Pesa, we record your phone number, the M-Pesa transaction/receipt number and the amount paid — we never see or store your M-Pesa PIN. We also record course attendance (watch time), CPD points awarded, and issued certificates.

How We Use Your Information

We use your information to verify your professional credentials, process your membership and CPD course registrations, award and track CPD points, issue certificates, process payments, and send you notifications (by email and SMS) about approvals, payments and certificates. Aggregate, de-identified statistics may be used to report on membership and training activity.

Legal Basis for Processing

We process personal data on the basis of your consent when you register, the performance of our membership/services contract with you, and compliance with our legal and regulatory obligations as a CPD training provider.

Third-Party Service Providers

We use Safaricom's M-Pesa (Daraja) platform to process payments and Africa's Talking to deliver SMS notifications. These providers only receive the minimum information necessary to complete a payment or deliver a message (e.g. your phone number and the amount or message content) and are bound by their own data protection obligations.

Data Retention

We retain your membership, CPD and payment records for as long as your account is active and thereafter for as long as necessary to meet our record-keeping obligations as a professional CPD provider, or until you request deletion where retention is not otherwise required by law.

Data Security

We apply reasonable technical and organisational measures to protect your data, including encrypted password storage, access controls restricting personal data (such as photos and national ID numbers) to authorised administrators only, and secure transmission of payment requests.

Your Rights

Under the Data Protection Act, 2019 you have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. You can update most of your own details from your member dashboard at any time, or contact us using the details on our Contact page to exercise any of these rights.

Cookies

Our website uses a small number of strictly necessary cookies to keep you signed in and to protect forms from cross-site attacks. See our Cookie Policy for details.

Children's Privacy

Our Services are intended for licensed and registered medical laboratory professionals and are not directed at children. We do not knowingly collect personal data from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Website after any change constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please reach out via our Contact page.