This notice explains our commitment to protecting your privacy and details how your personal information is collected, used, and safeguarded within the NextGen.Ke Programme.
Effective: July 1, 2026
Last updated: June 19th, 2026
This Privacy notice explains how the data is collected, used, shared, and safeguarded when you use the NextGen.Ke Platform ("the Programme" , "the Platform" , "we" , "our" or "us").
This notice applies to all users of the NextGen.Ke Platform, including candidates, company representatives, and administrators. By using the Platform, you consent to the data practices described in this notice. For the purpose of data governance on this Platform:
UNDP (Data Controller)
As the Data Controller, UNDP hosts the platform and provides its infrastructure.
KEPSA (Programme Partner)
KEPSA acts as a Data Processor on behalf of UNDP for the purposes of company vetting, candidate dispatch, and report approval. KEPSA processes your personal data only as instructed by UNDP and solely for the operation of the NextGen.Ke Programme. KEPSA does not independently determine how your data is used.
Partner Companies
When your profile is shortlisted, relevant information necessary for placement consideration is shared with the matched Partner Company. Upon receiving your data, the Partner Company becomes an independent Data Controller for that data. However, before any data is shared, each Partner Company is required to agree to data protection obligations that include using your data solely for the purpose of evaluating your candidacy for the internship placement.
We collect information to provide, improve, and secure the NextGen.Ke Platform. The types of data we collect depend on how you interact with us.
A. For Candidates (Youth)
B. For Partner Companies
When you use the Platform, we automatically collect technical data to ensure its functionality and security for all users:
We may collect sensitive data only with your explicit consent and used solely for the specific purposes disclosed in this notice.
We rely on the following legal bases for processing your personal data, and therefore this agreement is subject to UNDP’s Personal Data Protection and Privacy Policy (read the full Policy here)
✓ Consent
You consent to processing your data when you create an account and submit your application. You may withdraw consent at any time (subject to legal or contractual restrictions).
✓ Legitimate Interests
We process data where necessary to facilitate the core functions of the internship matching programme and ensure the security and integrity of the Platform.
We use your personal data exclusively for purposes related to the NextGen.Ke Programme. We do not sell your data or use it for commercial marketing.
For Candidates
For Partner Companies
System-Wide Usage
We use automated algorithms to evaluate candidate profiles against the requirements of Partner Companies. This scoring is based strictly on the data provided by candidates (e.g., skills, education, experience).
Your data is shared only for the explicit purpose of operating the NextGen.Ke Programme, as outlined below.
UNDP is the data controller for this platform.
As the designated Programme Partner, KEPSA is granted role-based access to specific platform datasets strictly to perform its mandated operational functions.
When matched to a Partner Company, we share only necessary evaluation data such as candidate profile, documents, and motivation letter.
We retain your personal data only as long as necessary to fulfil the purposes outlined in this notice. Different retention periods apply depending on your relationship with the Programme:
Unsuccessful Applicants
If you are not selected for placement, your profile data is retained in the active matching pool for the duration of the current programme cycle to allow for future matching opportunities. If no placement is made, your data is securely deleted within 12 months of the programme cycle ending.
Placed Interns
Your data, including monthly reports and stipend payment records, is retained for 7 years from the end of your placement to meet audit and financial reporting obligations.
Partner Companies
Company account data is retained for the duration of your participation in the Programme and for 7 years thereafter to meet audit requirements.
After the retention period expires, we securely delete your data. You may also request earlier deletion of your data as described under your rights.
We implement enterprise-grade technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure.
For All Users
You are responsible for maintaining the confidentiality of your account password. Notify us immediately if you suspect unauthorized access to your account.
For Partner Companies
Company representative accounts have privileged access to shorlisted candidate data. To maintain the integrity of our audit logs and prevent data breaches, do not share login credentials and only delegate access whenever necessary.
To exercise any of these rights, kindly reach out to us by submitting a request via our online contact form.
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data, subject to legal requirements.
Request to limit how we use your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
In case of any complaints, kindly reach out to us through support@kenyanextgen.co.ke.
We may update this Privacy notice from time to time to reflect changes in our practices, technology, or legal requirements.
When we make material changes, we will:
Your continued use of the Platform after changes become effective constitutes your acceptance of the revised Privacy Notice. If you disagree with the changes, you must stop using the Platform and may request deletion of your data.
By continuing, you acknowledge that you have read and understood this Privacy Notice.
