GDPR & Data Rights
Your rights under the General Data Protection Regulation and the Kenya Data Protection Act
These rights apply to all users, including those in the EU/EEA (GDPR), the United Kingdom (UK GDPR), Kenya (Data Protection Act, 2019), Uganda, Tanzania, and other East African jurisdictions with enacted data protection legislation.
Your Rights at a Glance
| Right | What It Means | How to Exercise |
|---|---|---|
| Right of Access (Art. 15) | Receive a copy of all personal data we hold about you, plus information on how it is processed. | Email privacy@vettrackpro.com with subject "Data Access Request" |
| Right to Rectification (Art. 16) | Have inaccurate personal data corrected or incomplete data completed. | Update in Profile settings, or email us |
| Right to Erasure (Art. 17) | "Right to be forgotten" — request deletion of personal data where no legitimate basis for retention exists. | Email with subject "Erasure Request" (subject to legal retention obligations) |
| Right to Restriction (Art. 18) | Restrict how we process your data in certain circumstances, e.g. while a rectification is pending. | Email privacy@vettrackpro.com |
| Right to Portability (Art. 20) | Receive your personal data in a structured, machine-readable format (JSON via API). | Available via REST API GET /api/v1/auth/me or email request |
| Right to Object (Art. 21) | Object to processing based on legitimate interests, including analytics profiling. | Email privacy@vettrackpro.com |
| Withdraw Consent | Withdraw consent for marketing emails at any time, without affecting lawfulness of prior processing. | Profile → Notification Settings → disable Marketing Emails |
| Right Not to be Subject to Automated Decisions (Art. 22) | Not be subject to solely automated decisions with significant legal effects. | We do not use such automated decision-making. |
Response Timelines
- Acknowledgement: Within 5 working days
- Full response: Within 30 days (extendable to 60 days for complex requests, with notice)
- Identity verification: We may need to verify your identity before processing requests
How to Complain
If you are unsatisfied with our handling of a data rights request, you have the right to lodge a complaint with your national supervisory authority:
- Kenya: Office of the Data Protection Commissioner (ODPC) — odpc.go.ke · Tel: +254 20 428 5000
- EU/EEA: Your local Data Protection Authority (DPA). Find yours at edpb.europa.eu
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- Uganda: Personal Data Protection Office (PDPO)
- Tanzania: Tanzania Communications Regulatory Authority (TCRA)
Contact Our DPO
Data Protection Officer · VetTrack Pro Ltd · Westlands, Nairobi, Kenya
Email: privacy@vettrackpro.com