Skip to content

Privacy Policy

Effective Date: January 2020
Last Updated: January 2022

The University of Eldoret (“the University”, “we”, “our”, or “us”) is committed to protecting the privacy of visitors, students, staff, partners, and users of its websites. This Privacy Policy explains how personal data is collected, used, stored, and protected.

1. Scope of this Policy

This policy applies to:

  • https://uoeld.ac.ke
  • All official University subdomains, including portals, learning systems, research platforms, application systems, and event websites

2. Information We Collect

Personal Information Provided by Users

  • Names
  • Email addresses
  • Phone numbers
  • Student or staff identification details
  • Registration, application, or inquiry information

Automatically Collected Information

  • IP addresses
  • Browser and device information
  • Pages visited and time spent
  • Cookies and analytics data

System and Service Data

  • Login credentials
  • Academic or administrative records where applicable
  • Communication preferences

3. Purpose of Data Collection

Personal data is collected to:

  • Provide academic and administrative services
  • Process registrations, applications, and inquiries
  • Manage user accounts
  • Communicate official information
  • Improve website performance and usability
  • Ensure system security and prevent fraud
  • Comply with legal and regulatory obligations

4. Legal Basis for Processing

Data processing is based on:

  • User consent
  • Performance of institutional services
  • Legitimate institutional interests
  • Compliance with the Kenya Data Protection Act, 2019

5. Cookies and Tracking

Cookies may be used to enhance user experience, maintain sessions, and analyze traffic. Users may disable cookies via browser settings, though some services may be affected.

6. Data Sharing and Disclosure

Personal data is not sold. Information may be shared:

  • Internally within University departments
  • With trusted service providers
  • With regulatory or law enforcement bodies when legally required

7. Data Security

Appropriate technical and organizational measures are in place to protect personal data, including secure servers and access controls.