Information Collected
We collect minimal data necessary for IPO applications and website functionality:
- Personal details (name, ID number, email, phone) submitted via e-IPO forms.
- CDS account information for share allocation.
- Usage data (IP address, browser type, pages visited) via cookies for analytics.
No sensitive financial data beyond application requirements is stored.
How We Use Data
Data supports IPO participation and compliance:
- Processing applications and share allocations per prospectus rules.
- Communicating offer updates, allocations, and refunds.
- Improving site performance through anonymized analytics.
- Meeting Capital Markets Authority (CMA) reporting obligations.
Data Sharing
Information is shared only as required:
- With authorised agents (Image Registrars, Receiving Banks, CDS agents).
- Government entities (CMA, NSE, GoK) for regulatory compliance.
- No sale or sharing with third-party marketers.
Data stays within Kenya unless for international pool applicants under approved channels.
Security Measures
We implement industry-standard protections:
- Secure servers with encryption for data transmission.
- Access controls limited to essential personnel.
- Regular audits to prevent breaches.
Users must protect login credentials for CDS and application portals.
Your Rights
Under Kenyan data protection law:
- Access, correct, or delete your data.
- Withdraw consent or object to processing.
- Lodge complaints with the Office of the Data Protection Commissioner.
Contact us to exercise rights. Data for applications is retained for 7 years post-listing.
Updates
Policy may update; changes posted here with effective date. Continued use implies acceptance.
Last Updated
January 20, 2026
Data Protection Officer Contact
dpo@image.co.ke