This website is run by the Shaun Daniel Machua campaign. We respect your privacy and aim to handle personal data in line with Kenya’sData Protection Act, 2019 and guidance from theOffice of the Data Protection Commissioner (ODPC), including its guidance on processing personal data for electoral purposes. The campaign is responsible for confirming its registration and compliance obligations with the ODPC.
Who to contact
- Data controller: Details to be confirmed by the campaign
- Privacy email: Details to be confirmed by the campaign
- Phone: Details to be confirmed by the campaign
- Postal address: Details to be confirmed by the campaign
Until those details are published, you can use the request form on this page.
What we collect, and why
Volunteer and contact form
- What: your name, one contact method (phone, WhatsApp or email), and optionally your ward, interests and a short message.
- Why: to contact you about volunteering and campaign activities you asked about.
- Legal basis: your consent, which you give by ticking the consent box. You can withdraw it at any time.
- How long: until the end of the 2027 general election period, then deleted within 90 days, unless you ask us to delete them sooner.
- Who sees it: only authorised campaign staff, through a protected admin area. We do not sell your details or share them with third parties by default.
Data requests (this page)
- What: your name, the phone number or email you gave us, and the details of your request.
- Why: to find your records and act on your request.
- How long: kept as a record that we handled your request, then deleted after the campaign period.
Sponsorship pledges for campaign materials
- What: your name, one contact method, the items and quantities you pledge to sponsor, and an optional message.
- Why: to contact you about your pledge and how to contribute.
- Legal basis: your consent, given by ticking the consent box. You can withdraw it at any time.
- How long: until the end of the 2027 general election period, then deleted within 90 days, unless you ask us to delete them sooner. Completed or cancelled pledges may be deleted sooner.
- Who sees it: only authorised campaign staff. It is never shown publicly.
Donations (when open)
- M-Pesa payments are processed by Safaricom. The website stores the amount, the payment status, the M-Pesa receipt reference and a masked form of your phone number (e.g. 254712***678), plus a one-way hash used to prevent duplicates. It does not store your full phone number.
- Campaign-finance law may require the campaign to keep records of contributions. Those records are handled by the campaign’s authorised finance officer through official channels.
Technical data
- To prevent spam and abuse, we briefly use your IP address to limit repeated submissions. We store only a salted, one-way hash, which is deleted within about a day.
- If spam protection is switched on, Cloudflare Turnstile may process technical signals from your browser. See Cloudflare’s privacy policy.
- This website does not use advertising or tracking cookies.
What we never collect
We never ask for national ID numbers, passport numbers, PPK membership credentials, M-Pesa PINs or voter registration details on this website.
Where your data is stored
The website runs on Cloudflare. Data is stored in Cloudflare D1, which may hold it in data centres outside Kenya. The campaign is responsible for confirming that this meets the Data Protection Act’s rules on cross-border transfers.
Your rights
Under the Data Protection Act, 2019, you can:
- be told how your data is used,
- ask for a copy of the data we hold about you,
- ask us to correct it,
- withdraw your consent, and ask us to delete your data,
- object to processing, and complain to the ODPC.
Use the form on this page to make a request. We will respond as quickly as we can, and within the time the law allows.