Privacy Policy

1. Introduction

Welcome to iRisk, an Enterprise Risk Management System (ERMIS) developed by AMJ. This Privacy Policy outlines how we collect, use, and protect your data when using iRisk. By accessing iRisk, you agree to the terms described in this policy.

2. Data Collection

2.1 Information We Collect

• Personal Information: Name, email address, phone number, and other contact details provided during registration or support interactions.
• System Usage Data: Information about your interactions with iRisk, including login timestamps, features accessed, and system logs.
• Risk Management Data: Any data entered by users related to risk assessment and management.

2.2 How We Collect Information

• Directly from users when they provide data during registration, support inquiries, or while using iRisk.
• Automatically through system logs, cookies, and analytics tools.

3. Use of Data

We use collected data to:

• Provide and improve iRisk services.
• Ensure system security and prevent unauthorized access.
• Respond to user inquiries and support requests.
• Comply with legal obligations and enforce our Terms of Service.

4. Data Sharing and Disclosure

We do not sell or rent user data. However, we may share data:

• With authorized employees who assist in operating iRisk.
• When required by law, such as in response to legal requests or compliance obligations.
• In case of a business merger, acquisition, or sale, where user data may be transferred to the new entity.

5. Data Security

We implement industry-standard security measures to protect user data, including:

• Encryption of sensitive data.
• Access controls to prevent unauthorized access.
• Regular system updates and vulnerability assessments.

6. Data Retention

We retain user data for as long as necessary to fulfill the purposes outlined in this policy. Users may request data deletion, subject to compliance with legal obligations.

7. User Rights

Users have the right to:

• Access, update, or delete their personal data.
• Opt out of marketing communications.
• Request clarification on data handling practices.

8. Third-Party Services

iRisk may integrate with third-party tools. These third parties have their own privacy policies, and we encourage users to review them before using external services.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Users will be notified of significant changes.

10. Contact Information

For inquiries regarding this Privacy Policy, please contact us at info@am.co.ke.