Everything your gym needs to handle member data correctly under the Data Protection Act, 2019. Seven ready-to-use documents, in English and Swahili, built specifically for Kenyan fitness businesses.
✓ Instant download · ✓ Optional 30-min implementation call included · ✓ 9 files
Every class you film, every transformation you celebrate, every member whose journey you share on social media -- that content is part of how you build community and grow your business.
The Data Protection Act, 2019 gives your members rights over their personal data -- including their image. Getting this right means you can keep doing what you do, with confidence that your practice is sound.
The ODPC has already acted. In one published determination, a healthcare facility was ordered to pay KES 750,000 after using a patient's image on its social media page without consent -- and continuing to use it for over a year after the complaint was filed. Your gym operates under the same legal framework.
Most gyms in Kenya haven't yet put the right systems in place. Not because they don't care -- but because no one has built the right tools for this specific context. Until now.
A clean, plain-language form capturing consent for filming, social media use, health data, CCTV, and marketing communications. Designed for front desk use -- members complete it in under three minutes.
English + SwahiliStep-by-step procedures for filming group classes, handling transformation posts, managing minor members' content, and responding to removal requests. Includes a content log template.
EnglishPrint-ready signage for every camera location, meeting the legal requirement to inform members before they enter a monitored area.
English + SwahiliA plain-English policy covering what data you collect, why, how long you keep it, and your members' rights. Designed for a gym -- not a generic 20-page corporate document.
EnglishOne page your manager can use to brief every staff member and trainer on what they can and cannot do with member data and phones on the gym floor.
English + SwahiliStep-by-step walkthrough of registering your gym as a Data Controller with the ODPC. Includes a compliance checklist so you know exactly where you stand.
EnglishWhat to do if a member raises a concern -- from initial acknowledgement through to resolution. Templates for image removal requests, data access requests, and ODPC complaint notifications. Four templates plus a complaint log.
EnglishThe member-facing documents -- the consent form, CCTV notice, and staff briefing guide -- are provided in both English and Swahili.
Because a consent form that a member cannot read is not a consent form.
Once you have the pack, you can implement it yourself. Everything is designed to be straightforward. But if you want to walk through it with us -- how to introduce the consent form to existing members, how to brief your staff, how to set up your ODPC registration -- book a 30-minute call at no extra cost.
This is a practical walkthrough, not a legal consultation.
The following are published determinations from the Office of the Data Protection Commissioner. They are cited here because they directly illustrate the risks your gym faces -- not hypothetical risks, but real cases decided under the same law that applies to you.
Healthcare facility ordered to pay KES 750,000
A facility used a person's image on its social media page without consent, passing them off as an employee. The ODPC ordered KES 750,000 in compensation and issued an enforcement notice. The facility continued using the image for over a year after the complaint was filed -- which the ODPC cited as an aggravating factor. ODPC Complaint No. 2101 of 2023.
School ordered to pay KES 750,000 for using student image on marketing materials
A school used a student's image on social media and physical event banners without consent for commercial promotional purposes. KES 750,000 compensation ordered. The principle applies directly to gyms using member images in promotional content. ODPC Complaint No. 0010 of 2024.
ODPC enforcement is accelerating
The ODPC issued 46 determinations in 2023, 109 in 2024, and 141 in 2025. Enforcement is not slowing down. Law Lab Africa tracks every published ODPC determination at research.lawlab.africa.
One purchase. Nine files. Instant download.
Questions? Email info@lawlab.africa
This pack contains general compliance templates and guidance prepared by Law Lab Africa. It does not constitute legal advice. For advice specific to your circumstances, consult a qualified advocate. Law Lab Africa is a research and advisory consultancy, not a law firm.