Data Protection & Privacy Policy
At Garth Day Year Auctioneers (GDYA), we are fully dedicated to safeguarding the privacy and security of all website visitors, clients, and stakeholders. In line with the Data Protection Act, 2019 and the regulations issued by the Office of the Data Protection Commissioner (ODPC), we ensure that all personal and sensitive information collected during our debt management, auction, repossession, and commission agency services is processed lawfully, fairly, and transparently.
We apply strict data privacy best practices, including obtaining clear consent before data collection, limiting data to what is necessary for its intended purpose, and maintaining secure storage systems with restricted access controls. Personal information is never shared with unauthorized parties, and any third-party processing is subject to rigorous compliance checks.
GDYA also upholds the rights of data subjects as outlined by the Data Protection Board of Kenya, including the right to access, rectify, and request deletion of personal data. By engaging with our platforms and services, you consent to our data handling practices as detailed in this policy.