CYBER.CO.KE is committed to protecting the privacy and security of personal data submitted by customers who request for the KRA Services that we offer, including:
KRA Individual Services
These are the main KRA Individual Services that we offer to customers in Kenya:
KRA Returns Services
These are the main KRA Returns Services that we offer to customers in Kenya:
We uphold the principles of lawful, fair, transparent and secure data processing as required under the Data Protection Act, No. 24 of 2019 and its Regulations.
This Data Privacy Statement explains the types of personal data we collect, how we use and share that data, the safeguards we apply and the rights you have as a data subject in Kenya.
This Statement should be read together with our Privacy Policy and Terms and Conditions. Where inconsistencies arise, this Data Privacy Statement prevails.
1. Definitions
CYBER.CO.KE: An online platform that provides KRA PIN Registration, Retrieval, Update, and Change of Email Address services to customers in Kenya.
Data Protection Officer (DPO): The person designated by CYBER.CO.KE to oversee compliance with the Data Protection Act and its Regulations.
Personal Data: Any information that identifies you directly or indirectly, such as your name, ID number, contact details, or any unique identifier.
Sensitive Personal Data: Data relating to ethnicity, political opinions, professional membership, biometric data, genetic data, health, or gender, as defined under the Data Protection Act.
Processing: Any operation performed on personal data, including collection, storage, use, disclosure, retrieval, alignment, erasure, or destruction.
Third Party: Any person or entity other than you and CYBER.CO.KE that is authorized to process personal data on our behalf.
Data Collection: Gathering information that you provide when completing and submitting our online service request forms.
2. Data Collection and Use
We collect personal data directly from you when you interact with our website or request our services. We also collect certain technical and usage data automatically for security and performance monitoring.
Personal data we may collect includes:
Identity Data: Name, ID Number and Date of Birth.
Contact Data: Email Address, Phone Number, County/City/Town.
Technical Data: IP Address, browser type, device information, operating system.
Usage Data: Pages visited, time spent, clicks and interaction patterns.
Payment Data: M-Pesa transaction details for service fees.
Purposes for which we use your data include:
• Processing and fulfilling your submitted service requests.
• Providing access to website features and improving user experience.
• Responding to customer support inquiries.
• Personalizing website functionality based on your preferences.
• Conducting analytics to improve content, security and site performance.
• Sending updates or communications where you have provided consent.
We only process personal data where there is a lawful basis such as your consent, performance of a contract, compliance with legal obligations, or legitimate business interests permitted by law.
3. Data Sharing and Disclosure
We may share your personal data only in the following circumstances:
a. With Authorized Service Providers
We may engage trusted third-party providers who support our service delivery. They are obligated to follow our instructions, maintain confidentiality, and apply appropriate security safeguards.
b. For Legal or Regulatory Compliance
We may disclose your information where required by Kenyan law, court order, law enforcement, or regulatory authorities, following authorization by our Data Protection Officer.
c. Business Changes
If CYBER.CO.KE undergoes restructuring, merger, acquisition or asset transfer, your personal data may be transferred to the successor entity subject to continued protection under this Statement.
We do not sell, rent or trade your personal data for marketing purposes without your explicit consent.
4. Data Security
CYBER.CO.KE implements technical, organizational and administrative measures to protect your personal data against unauthorized access, loss, misuse, alteration or destruction. These include:
• Encryption for sensitive data in transit and at rest.
• Access controls and authentication for authorized personnel.
• Regular monitoring, security testing and system updates.
• Staff training on data privacy and security best practices.
We ensure that both electronic and physical data repositories are secured using reasonable and appropriate safeguards.
5. Data Retention
We retain personal data only for as long as necessary to meet the purposes for which it was collected and as required by applicable Kenyan laws and regulatory obligations.
Retention periods are determined based on:
• The nature and sensitivity of the data.
• The purpose of processing.
• Legal, regulatory, or operational requirements.
• Internal policy considerations.
You may request deletion of your data before the retention period expires, in line with the Data Protection Act and our Data Protection and Privacy Policy. All such requests will be reviewed for compliance with legal requirements.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience, improve functionality and analyze site performance.
Cookies may:
• Recognize returning users
• Store your preferences
• Monitor usage patterns
• Support secure site functionality
You may choose to accept or decline cookies through your browser settings. However, declining cookies may limit access to some site features.
Our website may contain links, widgets, or content from third-party websites. These external sites operate independently and have their own privacy policies. CYBER.CO.KE is not responsible for their practices once you leave our platform.
7. Your Rights as a Data Subject
In accordance with the Data Protection Act, you have the following rights:
• Right of Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data under certain conditions.
• Right to Object: Object to processing, including direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time for activities based on consent.
• Right to Data Portability: Request transfer of your data to another controller where applicable.
To exercise these rights, contact us using the details provided below.
8. Changes to this Data Privacy Statement
CYBER.CO.KE may update this Statement periodically to reflect changes in our practices, regulatory requirements, or operational needs. Updated versions will be posted on this page with a revised Effective Date. Continued use of our services constitutes acceptance of the updated Statement.
9. Contact Information
For inquiries, concerns or to exercise your data protection rights, contact our Data Protection Officer via:
Email: [email protected]
We will respond in accordance with the Data Protection Act and applicable Regulations.
Statement Effective Date: 1st November 2019.
KRA INDIVIDUAL SERVICES
SUBMIT SERVICE REQUEST
KRA PIN REGISTRATION
Are you looking for KRA PIN Registration services in Kenya?
Submit your service request and let us handle everything for you.
Get your KRA PIN Certificate via Email Address and WhatsApp in a few minutes.
KRA PIN RETRIEVAL
Are you looking for KRA PIN Retrieval services in Kenya?
Submit your service request and let us handle everything for you.
Get your KRA PIN Certificate via Email Address and WhatsApp in a few minutes.
KRA PIN UPDATE
Are you looking for KRA PIN Update services in Kenya?
Submit your service request and let us handle everything for you.
Get your KRA PIN Certificate via Email Address and WhatsApp in a few minutes.
KRA PIN CHANGE OF EMAIL ADDRESS
Are you looking for KRA PIN Update services in Kenya?
Submit your service request and let us handle everything for you.
Get your KRA PIN Certificate via Email Address and WhatsApp in a few minutes.
KRA RETURNS SERVICES
SUBMIT SERVICE REQUEST
KRA NIL RETURNS
Are you looking for KRA Nil Returns services in Kenya?
Submit your service request and let us handle everything for you.
Get your e-Return Acknowledgement Receipt via Email Address and WhatsApp in a few minutes.
KRA EMPLOYMENT RETURNS
Are you looking for KRA Employment Returns services in Kenya?
Submit your service request and let us handle everything for you.
Get your e-Return Acknowledgement Receipt via Email Address and WhatsApp in a few minutes.
KRA AMENDED RETURNS
Are you looking for KRA Amended Returns services in Kenya?
Submit your service request and let us handle everything for you.
Get your e-Return Acknowledgement Receipt via Email Address and WhatsApp in a few minutes.
KRA WITHHOLDING TAX RETURNS
Are you looking for KRA Withholding Tax Returns services in Kenya?
Submit your service request and let us handle everything for you.
Get your e-Return Acknowledgement Receipt via Email Address and WhatsApp in a few minutes.
