Version 28 October 2026 · Membership registration
Who is responsible for your data
Mashinani People’s Movement (MPM) is responsible for membership information collected through this portal. Contact the Party Secretariat at headquarters at Wu Yi Plaza, House A10, Galana Road, Kilimani, Nairobi (P.O. Box 16923-00100), or info@mpm.or.ke for privacy enquiries.
Purpose and legal framework
Membership administration, eligibility checks and statutory reporting are governed by the Political Parties Act (Cap. 7D), the Political Parties (Membership) Regulations, 2021 and the Data Protection Act, 2019. MPM must establish an appropriate lawful basis for each use, minimise collection and protect personal data. Optional sensitive information is processed only with explicit consent or another applicable lawful basis.
Information and consent
The form collects name, ID or passport, birth date, sex, mobile and location, with optional contact and sensitive details. Ethnicity, religion and disability status include “Prefer not to say”. NCPWD particulars are requested only where disability is selected. Non-affiliation, processing and ORPP disclosure, and sensitive-data consent are recorded separately with a timestamp and statement version. Optional details do not determine membership eligibility.
Diaspora members
Associate / Diaspora members provide their country of residence, city or postal code and Kenyan passport or National ID. Their verification code is sent by email rather than SMS. Where data is processed across borders, MPM applies the transfer safeguards of the Data Protection Act, 2019.
ORPP verification and disclosure
Required membership particulars may be disclosed to the Office of the Registrar of Political Parties (ORPP) for verification, register reconciliation and statutory reporting. ORPP may check affiliation against other parties’ records. Consent to this disclosure does not authorise unrelated marketing or public publication of your ID. This demo sends no data to ORPP.
Google Sheets registration copy
Registration details, including ID or passport and any sensitive particulars supplied, are copied to the MPM Registered Members spreadsheet in the Secretariat’s connected Google account for membership administration. Google processes this copy through Google Sheets; restrict spreadsheet sharing to authorised Secretariat staff. Spreadsheet copies have separate access and retention controls and are not removed automatically when a portal record is removed. Before collecting real data, MPM must review Google’s processing terms, any international transfers and deletion procedures. This integration exports demonstration records only.
Your rights
Under the Data Protection Act, you may request information about processing, access to your data, correction of inaccurate data, restriction or objection where applicable, and erasure where permitted. You may withdraw optional consent without affecting earlier lawful processing. Statutory recordkeeping obligations may limit erasure. You may complain to the Office of the Data Protection Commissioner (ODPC) through its official channels. Contact the Secretariat for a rights request; identity will be checked privately.
Security, retention and staff access
Access is role-based. Agents access only their own registrations; report IDs are masked. MPM retains records only for necessary membership administration, legal obligations and dispute resolution, and must adopt a documented retention schedule before collecting real data. Resignation changes membership status rather than immediately deleting required records. No fixed retention period is asserted by this demonstration.
Demonstration limitations
Use fictional details only. All portal registrations are marked DEMO, and the visible code is not identity verification. Staff signup is open for demonstration purposes. This statement is a draft for Secretariat and legal review, not certification of statutory compliance. Real-data operation requires private verification, controlled staff onboarding, a retention policy and appropriate privacy review.