Privacy Policy
Nyasuba Golden Pillars Community Based Organization ("we", "us") is committed to protecting the personal information of everyone who visits this website, supports our work, or takes part in our programmes. This notice explains what we collect, why, and what rights you have. It is written to reflect our obligations under Kenya's Data Protection Act, 2019.
Who we are
Nyasuba Golden Pillars Community Based Organization
Registration No. DSD/34/186/02/30410
Kitengela, Kajiado County, Kenya
For any question about this notice or your personal information, contact us at info@nyasubagolden.org.
What we collect
We only collect information you choose to give us. Specifically:
- When you tell us about a donation. If you use the "I've sent my payment" form after giving, we record the gift you chose, the amount shown, and — only if you enter them — your name and phone number.
- When you contact us or register for an event. The details you type into our enquiry or registration forms, such as your name, phone number, and email address.
- Technical information. Our hosting provider automatically records standard server information such as IP addresses and browser types as part of delivering the website securely.
We do not use cookies, advertising trackers, or analytics tools on this website. We do not build profiles of visitors, and we do not sell or rent personal information to anyone, ever.
Please note that we never ask for and never receive your M-Pesa PIN, bank passwords, or card details. Payments happen entirely within M-Pesa or your bank — not on this website. Anyone asking for those details in our name is not us.
Why we use it, and on what basis
- To thank you for a donation and keep an accurate record of support received — on the basis of your consent.
- To respond to your enquiry or process your event registration — on the basis of your consent, and to take steps at your request.
- To report to partners and funders on our work — usually using anonymous or aggregated figures, not your personal details.
- To keep the website secure and working — on the basis of our legitimate interest.
Photographs
Photographs on this website may show children, young people, and community members taking part in our programmes. We seek permission before photographing anyone, and we ask a parent or guardian before photographing a child. If a photo of you or your child appears here and you would like it removed, contact us and we will take it down.
Who we share it with
We do not sell or trade your information. We share it only with service providers who help us run the website and our forms, and only to the extent needed — for example our website host and our form provider. We may also disclose information if we are required to by law.
[CONFIRM BEFORE PUBLISHING: name the actual service providers in use once the registration and enquiry forms are live — e.g. Netlify (hosting), Tally (forms). Some of these store data outside Kenya, which the Act requires us to tell people about.]
How long we keep it
[CONFIRM BEFORE PUBLISHING: how long donation records, enquiries and event registrations are kept. A common approach is to keep donation records for the period required by accounting or funder rules, and delete enquiries once resolved. This must reflect what the organization actually does.]
Your rights
Under the Data Protection Act, 2019, you have the right to:
- be told how your personal information is being used;
- ask for a copy of the information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- object to how we are using it, and withdraw consent at any time.
To exercise any of these, contact us using the details above. If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner (ODPC) of Kenya.
Keeping it safe
We take reasonable steps to protect personal information, and limit access to those who need it to do their work. No system is perfectly secure, but we will tell you and the ODPC without undue delay if a breach occurs that puts your information at risk.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last revised.
Not yet reviewed. This draft describes what the website technically does. Before publishing, it needs: (1) the organization's confirmation of the retention and third-party details marked above; (2) a check on whether registration with the ODPC is required for this organization; and (3) review by someone qualified to advise on Kenyan data protection law. It was prepared by the website developer, who is not a lawyer, and is not legal advice.