Privacy Policy

1. Who We Are

The Democratic Republic Movement ("DRM," "we," "us," or "our") is a registered political party in Kenya regulated by the Office of the Registrar of Political Parties (ORPP). Our membership registration portal is operated at members.drm.co.ke.

For all data and privacy matters, contact us at: members@drm.co.ke

2. Information We Collect

When you register as a DRM member, we collect the following categories of personal data:

• Identity data: Full name, National ID number or Passport number, date of birth, gender
• Contact data: Mobile phone number, alternative phone number, email address
• Location data: County, constituency, ward, village or estate
• Membership data: Membership category, membership ID, registration date, membership status
• Optional data: Occupation — only if you choose to provide it

We do not collect payment card numbers, bank account details, or passwords beyond what is needed for administrator login.

3. How We Use Your Information

We use your personal data for the following purposes:

• To register and verify your DRM party membership
• To match your details against the ORPP IPPMS national party membership register
• To send you membership confirmation via SMS
• To enable you to verify your membership status by dialling *509#
• To communicate important party announcements, elections, and events
• To generate anonymised statistical reports on party membership by county and constituency
• To comply with ORPP reporting obligations under the Political Parties Act, 2011

4. Legal Basis for Processing

We process your personal data under the following legal bases as provided by the Data Protection Act, 2019 (Kenya):

• Consent: You explicitly agree to our terms when you tick the consent checkbox during registration
• Legitimate interests: Processing necessary for party administration and ORPP compliance
• Legal obligation: Reporting obligations under the Political Parties Act, 2011

5. Data Storage & Security

Your membership data is stored securely on Google Firebase Firestore, a cloud database provided by Google LLC. Firebase data centres used by us are located within the European Union (eur3) or United States (us-central1) depending on configuration.

We implement the following security measures:

• Firebase Authentication to restrict admin access
• Firestore security rules to prevent unauthorised database access
• HTTPS encryption for all data transmitted between your browser and our servers
• Restricted admin panel access with password-protected login

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share it only in these limited circumstances:

• ORPP: As legally required under the Political Parties Act, 2011
• IEBC: Where required for voter roll verification
• Google Firebase: As our data storage processor (see Firebase Privacy)
• SMS providers: Your phone number may be shared with our SMS gateway solely to deliver membership confirmation messages
• Law enforcement: Where required by a valid court order or Kenyan law

7. Your Rights

Under the Data Protection Act, 2019, you have the following rights regarding your personal data:

• Right of access: Request a copy of the data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your membership data (subject to legal obligations)
• Right to object: Object to our processing for direct communication purposes
• Right to data portability: Request your data in a commonly used format

To exercise any of these rights, contact us at members@drm.co.ke. We will respond within 21 days.

8. Cookies

This website uses only strictly necessary technical cookies and localStorage to maintain your session during registration. We do not use advertising or tracking cookies. See our cookie notice on the portal homepage for more information.

9. Children's Privacy

Party membership requires a minimum age of 18 years. We do not knowingly collect data from persons under 18. The registration form enforces a date-of-birth check and sets a maximum eligibility date of 31 December 2006.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the registration portal after changes constitutes acceptance of the updated policy. For significant changes, we will notify registered members by SMS or email where possible.

11. Contact Us