Privacy notice
Last updated: TODO — set on publication
Who we are
TODO: legal entity name, registration number, registered address, ODPC registration number, and the contact details of our Data Protection Officer.
What this website collects
Nothing, unless you send us an enquiry. This site sets no analytics cookies, no advertising cookies, and no tracking cookies. There is no cookie banner because there is nothing to consent to.
Our web host records standard server logs (IP address, page requested, timestamp) for security and reliability. We do not use these to build a profile of you.
If you send us a school enquiry
The enquiry form collects your name, role, school, email address, phone number if you give it, and whatever you write in the message. We use it only to reply to you.
These details are sent to us by email. They are not stored in a database on this website.
Lawful basis: consent, which you give with the tick box on the form, and which you can withdraw at any time.
Children's data
This website does not knowingly collect any personal data from or about a child. The enquiry form is for adults acting for a school.
Where our programme collects student responses in school workshops, those responses are anonymous by design: no names, no admission numbers, no device identifiers. Where we work with a school, the school remains the data controller for its pupils' data and we act on its instructions under a written agreement.
TODO: link the full programme privacy notice and the school data processing agreement when they exist. Do not launch the Family Digital Pact until ODPC registration is complete.
Images
Photographs on this site are hosted by Cloudinary. We publish a photograph of an identifiable person only with signed consent, and we never place a photograph of an identifiable child alongside content about harm.
How long we keep things
TODO: set and publish a retention period for enquiry correspondence.
Your rights
Under the Data Protection Act 2019 you have the right to be informed, to access your data, to have it corrected, to have it deleted, and to object to how we use it.
To exercise any of these, write to TODO: DPO address. We will respond within the statutory period.
You may also complain to the Office of the Data Protection Commissioner: odpc.go.ke, complaint@odpc.go.ke.