Our Privacy Policy

01 Introduction

CRF Kenya is committed to respecting the privacy of people who interact with our organisation. We aim to handle personal information lawfully, fairly and transparently, and to collect information only where there is a legitimate purpose.

This policy applies to information collected through our website, enquiries, communication channels, donation processes and activities that link to this policy.

By using our website or voluntarily providing information to us, you acknowledge that your information may be handled as described in this policy, subject to applicable law.

02 Information We Collect

The information we collect depends on how you interact with CRF Kenya. It may include the following categories:

Information you provide directly

• Your name and contact details, such as email address and telephone number.
• Messages, questions and other information you submit through contact forms or email.
• Information you choose to provide when expressing interest in volunteering, events, partnerships or community programmes.
• Donation-related details needed to process or acknowledge a contribution.
• Photographs, videos or testimonials you submit or authorise us to use, where applicable.

Information collected through website use

Depending on the website configuration and services enabled, technical information may be collected, such as browser type, device information, pages visited, approximate location derived from technical data, and information about how the website is used.

03 How We Use Information

Where applicable and permitted by law, we may use personal information to:

• Respond to enquiries, messages and requests.
• Communicate information about our programmes, events and community initiatives where appropriate.
• Administer volunteering, event participation and partnership enquiries.
• Process donations and maintain appropriate donation records.
• Send acknowledgements, updates or receipts where applicable.
• Operate, maintain, troubleshoot and improve our website.
• Protect the website, prevent misuse and address technical or security issues.
• Meet applicable legal, accounting, regulatory and record-keeping obligations.

We seek to use information only for purposes that are relevant to the reason it was collected or for another lawful and compatible purpose.

04 Donations and Payments

If you make a donation through our website, information such as your name, email address, donation amount and any details you submit may be used to facilitate the transaction, maintain records and communicate with you about the contribution.

Online payments may be processed by third-party payment providers, including Paystack where enabled. Payment providers may process information under their own privacy policies and security practices.

CRF Kenya does not intend to collect or store complete payment card details through ordinary website forms. Payment details should be entered through the payment provider's authorised checkout interface.

A payment provider's processing of personal information is subject to its own terms and policies. We encourage donors to review those policies before completing a transaction.

05 Sharing Information

We do not intend to sell personal information. We may share information where necessary and lawful in the following circumstances:

• Service providers: Website hosting, email, payment processing, form handling, security or technical support providers that help operate our services.
• Programme partners: Relevant partners where information sharing is necessary for a programme or activity and is lawful and appropriate.
• Legal requirements: Where disclosure is required by applicable law, a valid legal process or a competent authority.
• Protection: Where necessary to protect people, rights, property, the website or the organisation, in accordance with applicable law.
• With your direction or consent: Where you ask us to share information or where consent is required and obtained.

Where appropriate, we seek to use service providers that are expected to handle information responsibly and only for authorised purposes.

06 Cookies and Analytics

Our website may use cookies and similar technologies to support essential functionality, remember preferences, improve performance or understand website usage.

The cookies in use depend on the website's current configuration and any third-party services that have been enabled. Some cookies may be necessary for the website to function, while optional analytics or marketing technologies may require consent under applicable law.

You can manage cookies through your browser settings. Blocking certain cookies may affect the functionality of some parts of the website.

If CRF Kenya uses analytics, embedded media, advertising integrations or other tracking services, those services may collect technical usage information under their own policies.

07 Storage and Security

We take reasonable organisational and technical measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Depending on how information is collected, it may be held in website systems, email accounts, service-provider platforms, donation records or other systems used for legitimate organisational purposes.

No website, electronic transmission or storage system can be guaranteed to be completely secure. If you believe you have disclosed information to us through an insecure channel, please contact us so we can assess the concern.

08 Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to requests, managing programmes, maintaining donation records, resolving disputes and meeting applicable legal or accounting obligations.

Retention periods may vary depending on the type of information, the reason for its collection and any legal requirements. Information that is no longer required should be securely deleted, anonymised or otherwise disposed of where appropriate.

09 Your Privacy Rights

Depending on applicable law and the circumstances of the processing, you may have rights concerning your personal information. These may include the right to:

• Request information about how your personal data is used.
• Request access to personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of information where legally applicable.
• Object to or request restriction of certain processing where the law provides that right.
• Withdraw consent where processing is based on consent, without affecting processing that occurred before withdrawal.
• Raise a concern with the relevant data protection authority.

These rights are subject to applicable legal conditions and exceptions. We may need to verify your identity before responding to a request.

Kenya's Data Protection Act, 2019 and other applicable laws may provide additional rights and obligations. You can contact us using the details below to make a privacy request.

10 Children's Privacy

CRF Kenya supports community initiatives that may involve children and young people. We recognise the importance of protecting children's personal information and respecting their dignity and safety.

Where information about a child is collected for a programme, event, photograph, video or other activity, the collection and use should be appropriate to the purpose and handled in accordance with applicable law and safeguarding requirements. Where required, appropriate consent or authorisation should be obtained from a parent, guardian or other authorised person.

Please contact us if you believe a child's personal information has been submitted to us inappropriately.

11 External Websites and Services

Our website may contain links to external websites, social media platforms, payment services and other third-party resources. When you follow these links, the privacy practices of the external service may apply.

We do not control the privacy practices or content of external websites. Please review their privacy notices before sharing personal information with them.

12 Changes to This Policy

We may update this Privacy Policy when our practices, services or legal obligations change. The updated version will be published on this page with a revised update date.

We encourage visitors to review this page periodically to stay informed about how we handle personal information.

13 Contact Us About Privacy

If you have a question about this policy, wish to make a privacy request or have a concern about the handling of personal information, contact CRF Kenya using the details below.