PRIVACY POLICY

Effective Date: 1st January, 2025
Organization: Keeping Alive Societies Hope (KASH)
Location: Kisumu, Kenya

CONTENTS

  • Introduction
  • Legal Framework
  • Information We Collect
  • How We Use Your Information
  • Legal Basis for Processing (GDPR-Aligned)
  • Data Sharing and Disclosure
  • Data Retention
  • Data Security
  • Your Rights
  • Cookies
  • Third-Party Links
  • Updates to This Policy

INTRODUCTION

Keeping Alive Societies Hope (KASH) is committed to safeguarding the privacy, dignity, and rights of all individuals and communities we serve.

Our work covers:

  1. Health interventions
  2. Human rights advocacy
  3. Democracy and governance
  4. Informal settlements upgrading
  5. Organizational system development

This Privacy Policy explains how we collect, process, store, and protect your personal data in accordance with applicable laws and ethical standards.

LEGAL FRAMEWORK

KASH processes personal data in compliance with:

  1. Kenya Data Protection Act, 2019
  2. General Data Protection Regulation (GDPR) principles (for international partnerships and donors)

We adhere to key principles of data protection:

  1. Lawfulness, fairness, and transparency
  2. Purpose limitation
  3. Data minimization
  4. Accuracy
  5. Storage limitation
  6. Integrity and confidentiality
  7. Accountability

INFORMATION WE COLLECT

a) Personal Information

  1. Name
  2. Phone number
  3. Email address
  4. Organization or affiliation
  5. Location (county, community, informal settlement)

b) Sensitive Personal Data

(Collected only where necessary and with explicit consent)

  1. Health information (HIV/STIs, PrEP/PEP, ART, screenings)
  2. Human rights or legal case information
  3. Gender-based violence (GBV) or counseling data
  4. Socio-economic and housing conditions
  5. Civic participation and governance engagement

👉 This data is handled with enhanced protection and strict confidentiality.

c) Automatically Collected Data

  1. IP address
  2. Device/browser type
  3. Website usage data

HOW WE USE YOUR INFORMATION

We use personal data to:

  1. Deliver health and social services
  2. Provide human rights support and referrals
  3. Implement community development and informal settlement programs
  4. Facilitate governance and civic engagement initiatives
  5. Strengthen organizational systems and partnerships
  6. Respond to inquiries
  7. Conduct monitoring, evaluation, and learning (MEL)
  8. Meet legal and donor reporting obligations

LEGAL BASIS FOR PROCESSING (GDPR-ALIGNED)

We process personal data based on:

  1. Consent – especially for sensitive data
  2. Legitimate interests – program implementation and improvement
  3. Legal obligations – compliance with Kenyan law
  4. Vital interests – protecting life, health, and safety

DATA SHARING AND DISCLOSURE

KASH does not sell personal data.

We may share data:

  1. With trusted partners and service providers under strict confidentiality agreements
  2. When required by law
  3. For donor reporting, using anonymized or aggregated data wherever possible

 DATA RETENTION

We retain personal data only as long as necessary for:

  1. Program implementation
  2. Legal and regulatory compliance
  3. Reporting obligations

After this period, data is securely deleted or anonymized.

DATA SECURITY

We implement appropriate safeguards, including:

  1. Restricted access to authorized personnel
  2. Secure storage systems (digital and physical)
  3. Confidentiality protocols for sensitive data
  4. Staff training on data protection

YOUR RIGHTS

Under the Kenya Data Protection Act (2019) and GDPR principles, you have the right to:

  1. Be informed about how your data is used
  2. Access your personal data
  3. Correct inaccurate data
  4. Request deletion of your data
  5. Object to processing
  6. Withdraw consent at any time
  7. Lodge a complaint with a supervisory authority

COOKIES

We use cookies to:

  • Improve website functionality
  • Analyze usage

You can control cookies through your browser settings.

THIRD-PARTY LINKS

Our website may link to external sites.
KASH is not responsible for their privacy practices.

UPDATES TO THIS POLICY

We may update this Privacy Policy periodically.
Changes will be posted here with a revised effective date.

CONTACT INFORMATION

For any privacy-related concerns:

Keeping Alive Societies Hope (KASH)
 Kisumu, Kenya
Email: admin@kash.or.ke