Photo & Privacy Notice
Effective 18 September 2026 · Notice version 2026-09-18
Who is responsible
The event host decides why event memories are collected and shared. Picha Zetu provides the service used to collect, protect and deliver them. The host and Picha Zetu each handle personal data for their respective responsibilities under Kenya’s Data Protection Act, 2019. Picha Zetu’s privacy contact is pichazetu28@gmail.com.
What happens when you upload
Your photo or video, optional first name, upload time and a random device token are collected so the memory can appear in the event gallery, be moderated, delivered to the host and, where the event plan includes it, used in the event album or keepsakes. The device token helps you manage your own upload and prevent misuse; it is not intended to identify you by name.
Promotional use
Picha Zetu will only use your uploaded memory in its advertising, social media, portfolio or other promotional or commercial material because you agreed to it when accepting this notice before uploading. If you prefer your memories not be used this way, email us and we will exclude them. You may withdraw this permission at any time; withdrawal does not undo lawful use that occurred before withdrawal.
Who can see and receive it
The event host can view every upload. Guests can view visible uploads only when the host has enabled the shared gallery. Trusted service providers may process data only to operate hosting, security and delivery for Picha Zetu. We do not sell your personal data.
How long it is kept
Event memories are kept for the gallery period included in the host’s plan, unless the host deletes them sooner or a longer period is required to resolve a request, dispute or legal obligation. Consent records may be kept as necessary to demonstrate the permissions given. After the applicable period, data is deleted or anonymised in line with our retention process.
Your choices and rights
You may ask to access, correct or delete your personal data, object to processing, restrict processing, or withdraw promotional consent. Use the delete control shown on your own upload where available, or contact the event host who shared the gallery link and identify the photo or video concerned. The host can remove it and raise any Picha Zetu privacy request on your behalf, or you can email pichazetu28@gmail.com. You may also complain to Kenya’s Office of the Data Protection Commissioner.
Children and other people
Do not upload a photo or video of a child unless you are their parent or guardian, or you have the parent or guardian’s permission. Before uploading other people, make sure they reasonably expect the image to be shared with this event and respect any request not to upload or to remove it.
Legal framework
This notice is designed around the Kenya Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021, including informed consent, purpose limitation, data-subject rights and separate permission for commercial use.