Who We Are

WISPIVAS (Winam Safe Parenthood Initiative) is a healthcare organization providing vasectomy information and services in Kenya. Our website address is: https://www.wispivas.com. This Privacy Policy explains how we collect, use, store, and protect your personal and medical data in compliance with the Kenya Data Protection Act (2019).

Data Controller

WISPIVAS
Winam Safe Parenthood Initiative, Kenya
Contact: [email protected]

What Personal Data We Collect

Medical & Health Information

We collect medical information necessary for vasectomy procedures, including but not limited to: medical history, consent forms, procedure notes, seminalysis sample data, post-operative survey responses, and clinical skills checklists. This data is collected through our self-hosted forms and Google Forms.

Contact Forms & Booking

When you use our booking form, registration form, or consent form, we collect your name, contact information, and any details you provide for the purpose of scheduling and providing medical services.

Google Forms Data

We use Google Forms (a service provided by Google LLC, USA) to collect certain medical and clinical data, including seminalysis sample collection, medical records access requests, procedure notes, clinical skills checklists, and quality assurance program data. Your data is stored on Google’s servers. By submitting information through these forms, you consent to your data being processed by Google in accordance with Google’s Privacy Policy and Google Workspace Data Processing Agreement. We have taken steps to ensure appropriate safeguards are in place for this data transfer.

Cookies

This site uses cookies for essential functionality, analytics, and compliance purposes. We use Complianz GDPR to manage cookie consent. You can manage your cookie preferences through the cookie banner on our site. Cookies we may use include:

  • Functional cookies (essential for site operation)
  • Analytics cookies (Google Analytics, Google Tag Manager)
  • Marketing cookies (Facebook Pixel for page view tracking)

Analytics & Tracking

We use analytics and tracking services (including Google Analytics, Google Tag Manager, and Facebook Pixel) to understand how our website is used and to improve our services. These services may collect anonymized data about your browsing behavior. You may opt out through our cookie consent banner.

Legal Basis for Processing

We process your personal data under the following legal bases as defined by the Kenya Data Protection Act (2019):

  • Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., medical procedures, consent forms).
  • Contractual necessity: Processing is necessary for the provision of medical services.
  • Legal obligation: Processing is necessary for compliance with legal and regulatory requirements (e.g., medical records retention).
  • Legitimate interests: Processing for analytics and improvement of our services.

How We Use Your Data

  • To provide vasectomy information, counselling, and medical services
  • To process bookings, registrations, and consent forms
  • To maintain medical records as required by Kenyan law
  • To conduct quality assurance and improve our services
  • To communicate with you regarding your medical care
  • To analyze website usage and improve user experience

Data Retention

Medical records are retained in accordance with Kenyan healthcare regulations. Personal data collected through forms is retained for the duration necessary to fulfil the purposes for which it was collected. Google Forms responses are reviewed periodically and deleted when no longer required for medical or legal purposes.

Who We Share Your Data With

We share data only as necessary for the provision of our services:

  • Google LLC (Google Workspace/Forms): Data submitted through Google Forms is processed and stored by Google. We have a Data Processing Agreement with Google Workspace.
  • Facebook/Meta: Anonymous page view data through Facebook Pixel.
  • Google Analytics: Anonymized usage data.
  • Healthcare providers: As necessary for your medical care.

We do not sell your personal data to third parties.

Your Rights Under Kenya Data Protection Act (2019)

You have the following rights regarding your personal data:

  • Right to be informed: You have the right to be informed about the collection and use of your personal data (this Privacy Policy fulfills this requirement).
  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can request correction of inaccurate or incomplete data.
  • Right to erasure: You can request deletion of your personal data, subject to legal retention requirements for medical records.
  • Right to restrict processing: You can request restriction of processing in certain circumstances.
  • Right to data portability: You can request transfer of your data to another service provider.
  • Right to object: You can object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us at [email protected].

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for all data transmitted through our website
  • Secure hosting with firewalls and access controls
  • Limited access to personal data on a need-to-know basis
  • Regular security audits and updates

Data Breach Procedures

In the event of a data breach, we will:

  • Notify the Office of the Data Protection Commissioner (Kenya) within 72 hours
  • Notify affected individuals if the breach poses a risk to their rights and freedoms
  • Take immediate steps to contain and remediate the breach

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Email: [email protected]
Website: https://www.wispivas.com

Complaints

If you believe we have not complied with data protection laws, please direct your complaint to the WISPIVAS team at [email protected]. We will review and respond to your complaint promptly.

Last updated: 14 June 2026