UNINEXUS CONNECT PLATFORM
DATA PROTECTION, PRIVACY AND INFORMATION SECURITY STATEMENT
Effective Date: 21 August 2026
At UniNexus Connect, a flagship platform of Bridging Academia Connect Organization (B.A Connect Organization), we recognize that trust is fundamental to building a credible and sustainable national digital community.
As we connect young people, students, universities, colleges, tertiary institutions, youth organizations, alumni, partners and other stakeholders, we are committed to handling personal information responsibly and protecting the privacy and rights of every member.
This Statement explains our commitment to responsible collection, use, storage, protection and management of personal information provided through the UniNexus Connect website, membership portal and related digital services.
Our approach is guided by the principles and requirements of the Kenya Data Protection Act, 2019, together with applicable data-protection regulations and standards. The Act establishes obligations for organizations processing personal data and provides individuals with important rights regarding their information.
1. OUR COMMITMENT TO MEMBER PRIVACY
Membership of UniNexus Connect should provide an environment in which young people can participate, connect and access opportunities with confidence.
We therefore commit to ensuring that personal information is:
- Collected lawfully, fairly and transparently.
- Collected for specific, legitimate and clearly communicated purposes.
- Limited to information that is relevant and reasonably necessary for those purposes.
- Maintained with reasonable measures to promote accuracy and integrity.
- Retained only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal and operational requirements.
- Protected against unauthorized access, disclosure, alteration, loss, misuse or destruction.
These principles reflect the core data-protection requirements recognized under Kenya's Data Protection Act.
2. INFORMATION WE MAY COLLECT
When you create an account or become a UniNexus Connect member, we may collect information necessary to establish and administer your membership.
This may include, where applicable:
- Full name and basic identification information.
- Email address and telephone number.
- University, college or institution affiliation.
- Course, programme, professional or organizational information.
- Membership and registration information.
- Profile information voluntarily provided by the member.
- Information relating to participation in UniNexus Connect programmes, events and opportunities.
- Login and account-security information.
- Technical information necessary for the operation, security and performance of the website.
We will seek to avoid collecting information that is unnecessary for the legitimate purposes of the platform.
Where information of a more sensitive nature is required, additional safeguards and appropriate legal requirements will apply.
3. WHY WE COLLECT MEMBER INFORMATION
Personal information may be processed for legitimate purposes including:
Membership Administration
To create, verify and maintain your UniNexus Connect membership and Membership ID.
Platform Access
To enable members to register, log in, manage their accounts and access relevant platform features.
Opportunity Access
To facilitate access to programmes, scholarships, leadership opportunities, mentorship, internships, events, networking and other initiatives available through the platform.
Communication
To provide important membership notices, programme information, opportunities, announcements and relevant organizational communications.
Community Development
To understand the needs and interests of our membership and improve programmes, services and opportunities.
Security and Compliance
To protect the integrity of the platform, prevent unauthorized access or misuse, and meet applicable legal and regulatory obligations.
4. PROTECTION OF MEMBER ACCOUNTS
UniNexus Connect is designed to provide controlled access to member accounts.
Members are responsible for maintaining the confidentiality of their login credentials and should not share passwords, authentication details or account access with other individuals.
Where appropriate, platform security measures may include access controls, authentication mechanisms, secure data handling practices, monitoring and other technical and organizational safeguards appropriate to the nature of the information being processed.
No digital platform can responsibly guarantee absolute protection against every possible cyber threat. However, UniNexus Connect is committed to continuously reviewing and strengthening its security practices as the platform develops.
5. ACCESS TO MEMBER INFORMATION
Access to personal information should be limited to authorized personnel, service providers or other parties who have a legitimate need to process such information for defined purposes.
Where external service providers or data processors are engaged to support the operation of the platform, appropriate contractual, technical and organizational safeguards should be applied to protect personal information.
Personal information will not be treated as a commodity or made publicly available simply because an individual has registered as a member.
6. SHARING OF INFORMATION
UniNexus Connect will not sell members' personal information.
Information may only be disclosed or shared where there is a legitimate and lawful basis to do so, including where:
- The member has provided appropriate consent.
- It is necessary to provide a service or opportunity requested by the member.
- It is necessary for the legitimate operation and administration of the platform.
- It is required by law or a lawful authority.
- It is necessary to protect the security, rights or integrity of UniNexus Connect, its members or other stakeholders.
Where third parties process information on behalf of UniNexus Connect, their handling of personal information should be governed by appropriate safeguards and applicable data-protection requirements.
7. MEMBER RIGHTS
Under Kenya's data-protection framework, members have important rights concerning their personal information.
Subject to applicable law and any lawful limitations, a member may have the right to:
- Be informed about how their personal information is being used.
- Request access to personal information held about them.
- Request correction of inaccurate or misleading information.
- Object to certain forms of processing.
- Request deletion of certain personal information where legally applicable.
- Exercise other rights provided under applicable data-protection legislation.
The Office of the Data Protection Commissioner identifies these rights as fundamental protections for data subjects in Kenya.
8. DATA RETENTION
We will retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, administer membership, maintain appropriate records, meet legal obligations or resolve legitimate disputes.
When information is no longer required, appropriate measures should be taken for its secure deletion, anonymization or disposal, subject to applicable legal and operational requirements.
9. INTERNATIONAL DATA TRANSFERS
Where personal information is transferred or processed outside Kenya, UniNexus Connect will seek to ensure that applicable requirements concerning international transfers and appropriate data-protection safeguards are observed.
Kenya's data-protection framework places specific requirements on transfers of personal data outside the country.
10. DATA SECURITY INCIDENTS
UniNexus Connect recognizes that responsible data governance includes preparing for and responding to potential security incidents.
Where a personal-data breach occurs, appropriate assessment, containment, investigation, documentation and notification procedures should be followed in accordance with applicable law and regulatory requirements.
The Office of the Data Protection Commissioner provides a formal mechanism for reporting personal-data breaches by data controllers and processors.
11. MEMBER RESPONSIBILITY
Data protection is a shared responsibility.
Members are encouraged to:
- Keep passwords and account credentials confidential.
- Use strong and unique passwords.
- Avoid accessing accounts through untrusted or unsecured devices.
- Keep personal information within their profile accurate and up to date.
- Immediately report suspected unauthorized access or suspicious activity.
- Review privacy notices and platform policies before submitting additional information.
12. CONTINUOUS IMPROVEMENT
UniNexus Connect is being developed as a long-term national platform.
As our membership, partnerships, technology and services grow, our privacy, information-security and data-governance practices will continue to evolve accordingly.
We are committed to reviewing our policies, strengthening technical and organizational safeguards, promoting responsible data practices and maintaining transparency with our members.
OUR COMMITMENT
At UniNexus Connect, your information represents more than data; it represents an individual, a story, an institution, a talent, an ambition and a future.
We therefore believe that protecting member information is not merely a technical responsibility; it is a fundamental part of building a credible, trusted and sustainable national youth platform.
As we work to connect institutions, cultures, people and opportunities across Kenya and beyond, we remain committed to ensuring that trust, privacy, accountability and responsible data governance remain at the heart of the UniNexus Connect experience.
Connect. Belong. Grow. Lead.
UNINEXUS CONNECT PLATFORM
Where Youth, Institutions & Opportunities Connect.
A Flagship Platform of Bridging Academia Connect Organization
Comments are disabled for this article.