Effective Date: February 15, 2026 | Last Updated: February 15, 2026
1. Introduction
Welcome to stocks.or.ke ("the Platform", "we", "us", or "our"), a Nairobi Securities Exchange (NSE) market data and information platform. We are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have in relation to it. It applies to all users of the Platform, including visitors, registered members, and newsletter subscribers.
By accessing or using stocks.or.ke, you agree to the collection and use of your information in accordance with this Policy. If you do not agree, please discontinue use of the Platform.
2. Data Controller
stocks.or.ke is the data controller responsible for the personal information collected through this Platform. For any questions regarding this Privacy Policy or your personal data, you may contact us using the details in Section 12 below.
3. Information We Collect
We collect the following categories of personal information:
3.1 Information You Provide to Us
When you create an account or interact with the Platform, you may provide:
- Full name
- Email address
- Phone number
- Any other information you voluntarily submit through forms or communication channels
3.2 Information Collected Automatically
When you visit the Platform, we automatically collect certain technical and usage data, including:
- IP address and approximate geographic location
- Browser type and version
- Operating system and device type
- Pages visited, links clicked, and time spent on the Platform
- Referring website or source
- Cookie identifiers and similar tracking data (see Section 7)
4. How We Use Your Information
We use the personal information we collect for the following purposes:
4.1 To Provide and Improve the Platform
- Create and manage your user account
- Deliver NSE market data, stock prices, and financial information
- Respond to your inquiries, comments, and support requests
- Analyse usage patterns to improve the Platform's functionality and user experience
4.2 Communications
- Send you newsletters, market updates, and financial news you have subscribed to
- Send transactional emails such as account confirmations, password resets, and security alerts
- Notify you of changes to our services or policies
4.3 Marketing and Advertising
- Display interest-based or contextual advertisements through third-party advertising partners
- Measure the effectiveness of advertising campaigns
4.4 Legal and Compliance
- Comply with applicable Kenyan laws and regulations, including the Data Protection Act, 2019
- Prevent fraud, abuse, or unauthorised access to the Platform
- Enforce our Terms of Service and other applicable agreements
5. Legal Basis for Processing
In accordance with the Kenya Data Protection Act, 2019 ("DPA 2019"), we process your personal data on the following lawful bases:
- Consent – where you have given clear consent (e.g., newsletter subscription, cookies).
- Contractual necessity – to create and manage your account and deliver our services.
- Legitimate interests – to analyse and improve our Platform and prevent fraud, provided this does not override your fundamental rights.
- Legal obligation – where processing is required by Kenyan law or regulation.
6. Sharing Your Information
We do not sell or rent your personal information. We may share it in the following limited circumstances:
6.1 Service Providers
We work with trusted third-party service providers who assist us in operating the Platform, including cloud hosting providers, email delivery services, and analytics providers. These parties are contractually obligated to protect your data and may only process it for specified purposes.
6.2 Advertising Partners
We work with third-party advertising networks to display ads on our Platform. These partners may use cookies and similar technologies to collect data about your browsing activity in order to serve targeted advertisements. Please refer to their respective privacy policies for details on their data practices.
6.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or regulatory authority, or if we believe disclosure is necessary to protect the rights, property, or safety of stocks.or.ke, our users, or the public.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and the implications for your data.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Platform. A cookie is a small text file stored on your device when you visit a website.
7.1 Types of Cookies We Use
- Essential Cookies – Required for the Platform to function correctly, such as maintaining your logged-in session.
- Analytics Cookies – Tools such as Google Analytics help us understand how users interact with our Platform by collecting anonymised usage data.
- Advertising Cookies – Used by our advertising partners to deliver relevant ads and measure campaign performance.
- Preference Cookies – Remember your settings and preferences for a personalised experience.
7.2 Your Cookie Choices
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Where required by law, we will obtain your consent before placing non-essential cookies on your device.
8. Data Retention
We retain your personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law. Specifically:
- Account data is retained for the duration of your account and up to 5 years after closure, in line with financial record-keeping requirements.
- Usage and analytics data is typically retained in aggregated or anonymised form for up to 26 months.
- Email correspondence and support records are retained for up to 3 years.
When data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.
9. Your Data Protection Rights
Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:
- Right of Access – You may request a copy of the personal data we hold about you.
- Right to Rectification – You may request correction of inaccurate or incomplete data.
- Right to Erasure – You may request deletion of your personal data, subject to legal obligations.
- Right to Restrict Processing – You may request that we limit how we use your data in certain circumstances.
- Right to Data Portability – You may request your data in a structured, machine-readable format.
- Right to Object – You may object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent – Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us using the details in Section 12. We will respond to verified requests within 30 days in accordance with the DPA 2019. If you are dissatisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.
10. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
- Encryption of data in transit using SSL/TLS
- Secure storage with access controls and authentication
- Regular security reviews and vulnerability assessments
- Staff training on data protection obligations
While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to take steps to protect your own account, such as using a strong and unique password.
11. Children's Privacy
stocks.or.ke is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately so that we may take appropriate action, including deletion of such data.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Website: https://stocks.or.ke
Email: [email protected]
Address: Nairobi, Kenya
You may also file a complaint with the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke if you believe your data protection rights have been violated.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will notify you by posting the updated Policy on this page with a revised “Last Updated” date, and, where appropriate, by sending a notification to your registered email address.
Your continued use of the Platform following notification of any changes constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.
This Privacy Policy was prepared for stocks.or.ke and is governed by the laws of Kenya,
including the Data Protection Act, 2019, and the regulations made thereunder.