1. Who We Are
DMIS is an online platform providing digital academic support and related services. In this policy, “DMIS”, “we”, “us” and “our” refer to the DMIS service operator, while “you” and “your” refer to the person using the website or services.
Depending on the activity involved, DMIS may act as a data controller for personal information it determines the purposes and means of processing, and may use service providers that process information on its behalf.
2. Information We Collect
Account information
When you create or use an account, we may collect your name, email address, telephone number, password-related information and account activity.
Order information
When you place an order, we may collect information such as academic level, subject, deadline, service requirements, order instructions, reference materials, files and other information necessary to fulfil the requested service.
Communication information
If you contact us, we may collect your name, email address, telephone number and the contents of your communication.
Payment information
Payments may be handled by third-party payment providers. DMIS may receive transaction information such as payment status, transaction reference or other information needed to reconcile an order. We do not intend to collect or store full payment-card credentials unless expressly stated by the relevant payment provider and permitted by law.
Technical information
We may process information such as IP address, browser type, device information, pages visited, approximate usage information, security logs and other technical information generated when you use the website.
3. How We Collect Personal Data
We may collect personal information:
- directly from you when you register or submit an order;
- when you communicate with customer support;
- when you upload files or provide order instructions;
- through your use of the customer dashboard;
- through cookies and similar technical technologies; and
- from service providers involved in payment, hosting, security, communications or other legitimate platform operations.
4. Why We Use Personal Data
DMIS may use personal information for purposes including:
- creating and managing customer accounts;
- processing and administering orders;
- communicating about orders, revisions, payments and support;
- delivering services and enabling writers or editors to work on assigned orders;
- processing and reconciling payments;
- maintaining platform security and preventing fraud or abuse;
- troubleshooting and improving website functionality;
- maintaining business and transaction records;
- complying with legal, regulatory or lawful requests; and
- handling disputes, complaints and enforcement of our terms.
5. Lawful Bases for Processing
Depending on the circumstances, DMIS may rely on one or more lawful bases recognised under applicable data-protection law, including consent, performance of a contract or steps requested before entering into a contract, compliance with a legal obligation, legitimate interests, and other lawful grounds that may apply.
Where processing relies on consent, you may withdraw consent where the law permits. Withdrawal does not necessarily affect processing that was lawfully carried out before withdrawal or processing that has another lawful basis.
7. International Data Transfers
Some technology or service providers used by DMIS may process information outside Kenya. Where personal information is transferred outside Kenya, DMIS will seek to apply safeguards and comply with applicable requirements governing cross-border transfers.
Where applicable law requires consent, adequate safeguards or another specific legal condition for an international transfer, DMIS will seek to meet that requirement.
8. How Long We Keep Personal Data
DMIS does not intend to retain personal information indefinitely. Retention periods depend on the type of information, the purpose for which it was collected, operational requirements, security needs, dispute-resolution needs and legal or regulatory obligations.
When information is no longer required for a lawful purpose, DMIS may delete, anonymise or securely dispose of it, subject to any applicable legal or legitimate retention requirement.
9. Security of Personal Data
DMIS uses reasonable technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration, loss, misuse or destruction.
Security measures may include access controls, authentication, secure connections, restricted administrative access, system monitoring, backups and other measures appropriate to the nature of the information and risks involved.
No internet transmission or storage system can be guaranteed to be completely secure. You should also protect your account credentials and avoid sharing passwords with others.
11. Google reCAPTCHA
DMIS uses Google reCAPTCHA to help protect the website and its forms against spam, abuse and automated activity. When reCAPTCHA is loaded, Google may process technical and interaction-related information in accordance with Google's own policies and terms.
DMIS does not control Google's independent processing of information through reCAPTCHA. For information about Google's handling of data through reCAPTCHA, users should review Google's applicable privacy documentation.
12. Your Data Protection Rights
Subject to applicable law and any lawful limitations, you may have rights including:
- the right to be informed about the use of your personal data;
- the right to access personal data held about you;
- the right to request correction of inaccurate or misleading personal data;
- the right to object to certain processing;
- the right to request deletion of personal data in circumstances provided by law;
- the right to request restriction of processing where applicable;
- the right to data portability where applicable; and
- the right to make a complaint to the relevant data-protection authority.
The Office of the Data Protection Commissioner (ODPC) identifies rights including being informed, access, objection, correction and deletion, together with other rights recognised under Kenya's data-protection framework. citeturn0search0
13. How to Make a Privacy Request
To ask about your personal information, request access or correction, raise an objection, or make another privacy-related request, contact DMIS using the details below.
We may need to verify your identity before acting on a request in order to protect personal information from unauthorised disclosure.
We will handle valid requests within the applicable legal timeframes and may explain where a request cannot be fulfilled because a lawful exception or other applicable requirement applies.
14. Children's Data
DMIS is not intended to encourage unlawful collection or processing of children's personal data. Where services involve a child or student who is a minor, appropriate consent, authority and safeguards should be in place as required by applicable law.
Do not knowingly submit another person's personal information, including a child's information, unless you have the appropriate authority to do so.
15. Data Incidents and Breaches
If DMIS becomes aware of a personal-data security incident, we will assess the incident and take reasonable steps to contain, investigate and address it.
Where applicable law requires notification to affected individuals or the relevant regulator, DMIS will follow the applicable notification requirements.
16. Changes to This Privacy Policy
DMIS may update this Privacy Policy when our services, technology, data-processing practices or applicable legal requirements change.
The latest version will be published on this page with an updated date. We encourage users to review this page periodically.
17. Contact DMIS
If you have a question, concern or request relating to this Privacy Policy or the handling of your personal information, contact us:
Website: dmis.co.ke
Privacy / Support: support@dmis.co.ke
You may also have the right to raise a complaint with the Office of the Data Protection Commissioner where applicable. The ODPC is the Kenyan regulator responsible for oversight of personal-data processing and protection of data-subject rights. citeturn0search2turn0search4