Privacy policy
We collect very little about you, use it only to answer you, and never sell it. Here is exactly what that means.
Who we are
This website is run by Green Development Caucus Foundation (“GDC Foundation”, “we”, “us”), a non-profit organisation based in Nairobi, Kenya. For the personal information described here, we are the data controller under Kenya’s Data Protection Act, 2019.
You can reach us at thegreendcfoundation@gmail.com or by post at P.O. Box 2887–00100, Nairobi, Kenya.
What we collect
We only collect what you choose to give us, and a small amount of technical information every website needs to work.
- When you contact us through the form on our Partner page: your name, your organisation if you give it, your email address, the kind of work you are interested in, and your message.
- When you email us directly: your email address and whatever you include in your message.
- When you give a gift: your name, phone number or email address, the amount, how often you give, and the payment reference. Your M-Pesa PIN and card details go straight to the payment provider. We never see or store them.
- When you visit any page: our hosting provider automatically records basic request information, such as your IP address, browser type, the page requested and the time. This is used to deliver the site, keep it secure and fix faults.
We do not use analytics or advertising tools, we do not build profiles of visitors, and we do not buy or sell personal information.
How we use it
- To read and reply to your message, and to follow up on the partnership, funding or research you asked about. Our lawful basis is your consent and our legitimate interest in answering people who contact us.
- To process your gift, send your receipt, manage a monthly gift and keep the financial records the law requires. Our lawful basis is performing the arrangement you entered into with us and meeting our legal obligations.
- To keep the website secure and working. Our lawful basis is our legitimate interest in running a safe website.
Information stored outside Kenya
Some of our providers store data on servers outside Kenya. Where that happens, we rely on providers that apply appropriate safeguards for personal data, as required by section 48 of the Data Protection Act, 2019.
How long we keep it
- Contact messages and the emails that follow: up to two years after our last exchange, then deleted, unless they become part of a partnership or contract we must keep records of.
- Gift and payment records: as long as Kenyan tax law requires, currently five years.
- Hosting request records: kept by our hosting provider for a short period, usually no more than 30 days.
Your rights
Under the Data Protection Act, 2019 you have the right to:
- be told how your personal information is used, which is what this page is for;
- see the personal information we hold about you;
- have inaccurate information corrected;
- have information deleted, where we have no legal reason to keep it;
- object to our use of your information;
- receive your information in a format you can take elsewhere.
To use any of these rights, email thegreendcfoundation@gmail.com. We will reply within 30 days and will not charge you. If you are not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.
How we protect it
The website is served only over an encrypted connection. Access to the inbox and to our provider accounts is limited to the people who need it and protected by strong passwords and two-step sign-in. No method of sending or storing data is completely secure, but we take reasonable steps to protect what you share with us.
Children
This website is meant for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us their details, email us and we will delete them.
Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top. If a change is significant, we will say so clearly on this page. You can also read our terms of use.