Data Protection

Chance Publishers is committed to handling your personal data responsibly, in line with the Data Protection Act, 2019 of Kenya and the guidance of the Office of the Data Protection Commissioner (ODPC).

How we protect your data

• Passwords are never stored in plain text — they are protected using a secure, industry-standard one-way hashing method.
• Your files (manuscripts, signed NDAs, payment proofs) are stored in private, access-controlled storage — never in a public location — and can only be downloaded by you, the staff assigned to your project, or an administrator.
• All traffic to our website and portal is encrypted (HTTPS).
• Access to client and financial data within our systems is restricted to staff who need it to do their job, and administrators.
• We apply security headers and safeguards on our website designed to reduce the risk of common web attacks.

Your rights

Under the Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated personal data — you can update most of your details directly in the author portal under Settings.
• Request deletion of your personal data, subject to our legal obligation to retain certain records (such as signed NDAs and financial records) for a minimum period.
• Object to certain uses of your data, and to withdraw consent where processing is based on consent.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been mishandled.

To exercise any of these rights, contact us using the details at the bottom of this page. We will respond within a reasonable time, and in any case within the timeframe required by law.

Data breaches

In the unlikely event of a personal data breach that is likely to result in a risk to your rights, we will notify the ODPC and affected individuals as required under the Data Protection Act, 2019.

International data

Some of the third-party services we rely on (such as email delivery and cloud file storage) may process data outside Kenya. Where this happens, we take reasonable steps to ensure those providers offer an adequate level of data protection.