Privacy policy Kenya donations

We are registered as an NGO under section 10 of the Non-Governmental Organizations Co-ordination Act in Kenya. Our registration number is: OP.218/051/17-033/10709. Our Parent Company is Ripple Effect International who are registered as a Charity in England and Wales, and whose registration number is: 299717

Together with Ripple Effect International we are joint data controllers of the personal data that we hold. We are in the process of registering as a data controller under The Office of the Data Protection Commissioner Kenya. You can find more about Ripple Effect Internationals registration here.

Any data that we collect will be used in accordance with the requirements of The Data Protection Act Kenya 2019 and the UK GDPR Data Protection Act 2018

Any electronic direct marketing communications will be made in accordance with the Privacy and Electronic Communications Regulations (PECR)

If you have any queries about this Notice or how we process your personal information please contact our team using the details below

Email: Kenya@rippleeffect.org

Write:

Ripple Effect Kenya

Kefinco Estate, Finland rd.  
House No. 2 
P.O. Box 1761 – 50100  
Kakamega, Kenya

Call: (+254) 562 031 245

Alternatively you can contact dataprotection@rippleeffect.org to raise any matter with our Data Protection Group

You have the following rights under the UK GDPR and the Kenya Data Protection Act 2019

• The right to be informed how your personal data is processed
• The right of access to your personal data
• The right to edit and update your personal data
• The right to have your personal information deleted
• The right to restrict processing of your personal information
• The right to object
• The right to portability
• The right not to be subject to a decision based solely on automated processing

The sections below explain more about how Ripple Effect processes your data in line with your rights as an individual.

We collect the personal information you provide us with as part of online purchases and donations, through donation forms, e-newsletter sign up’s, registering for events, surveys and meetings with our staff. We also collect how you want to hear from us (your preferences.)

We may also collect donations via third party fundraising platforms such as M-changa. Their use of your information is based on their terms of service and policies, not ours, so we encourage you to review those policies carefully before donating.

The personal information we collect may include:

• Title & Name
• Postal address, email address, telephone number and mobile number
• Current interests and activities relevant to Ripple Effect’s work and our fundraising
• We will ask you to confirm that you are 18 or over when making a donation through our website. This is to ensure that we do not use the personal information of a minor for marketing purposes.

We also collect and hold information about the contact you make and activities you take part in with Ripple Effect and this may consist of:

• Donation details
• Online purchase details
• Event registration/attendance
• Direct Debit details where applicable
• Gifts in Will information
• Details of correspondence sent to you or received from you
• Responses to surveys sent to you
• Any other information provided by yourself that is relevant to your relationship with Ripple Effect

We may process the personal information you provide or that we may collect from publically available sources to support our legitimate interest in delivering Ripple Effect’s charitable mission. We process data to enable us to administer your donations correctly, and to help us build a positive relationship by contacting you in a way that is personal and relevant to support our fundraising. This also helps Ripple Effect to be as efficient as possible in using its resources for marketing and other contact with supporters.

We will only process your data where we have a legal basis to do so. You have a right to object to how we use your data and can change your preferences at any time by contacting us. There are some communications that we are required to send regardless of your preferences. These are essential communications, deemed necessary to fulfil our legal and administrative obligations to you. This would advanced notices, thank you letters, querying returned mail, incomplete cheques or bounced payments with you.

There may be occasions where we are required to collect your email or telephone number to complete an order such as on our website. In these cases, we will always ask permission to use your email, and give you a way to object to us using your phone number, for marketing purposes.

Direct marketing

We may also collect personal data for the purpose of direct marketing, such as newsletters and fundraising appeals. In this case, we will always obtain your consent before sending you any marketing communications.

Financial audit 

We need to hold information about donations that you give to us to meet financial auditing requirements but also to help us understand how you support Ripple Effect so that we can talk to you about fundraising and supporting our work in a way that is relevant to you.

Areas of interest 

We may hold information about your particular areas of interest so we can send information to you about those aspects of our work. For example if you tell us you have a particular link with Uganda, we may then contact you in the future about a new Ugandan project we are setting up.

Address information

We hold your address details so that we can post newsletters, appeals and other information to you. We will also hold your address information on our database so that if you request us to no longer contact you, we can keep a record to ensure we remove you from any mailings in the future.

All the information we keep is stored on a secure database held on a server within the EU. We take appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, or destruction and we regularly review and update our security measures to ensure that your personal data is protected.

If you donate from outside of the UK, your data will be stored on this system and in line with European Data Protection Directives. Depending on your relationship with Ripple Effect, and the preferences you have indicated, data we hold may be used by us for the following purposes to support Ripple Effect’s charitable mission and for your benefit to ensure that we process your donation correctly and contact you in a way that is personal and relevant. Whenever we process data we will always consider your personal rights and you have a right to object to the way that we use your data if you wish by contacting us.

If you have given us your consent to do so we might send you promotional, marketing or fundraising information by post, telephone or electronic means. These types of communications can include:

• News and updates about Ripple Effect, such as our twice yearly Lifeline newsletter and monthly e-newsletters.
• Fundraising appeals or to ask you to consider supporting us in other ways such as taking part in events
• Other relevant communications based upon your relationship with Ripple Effect
• Informing you of other activities, or events related to Ripple Effect such as volunteering, retail and corporate partnerships

Data screening and cleansing. We regularly review our records to ensure they are as accurate as possible. We may also consult alternative sources in order to undertake these check.

Tailoring what we tell you about. We may use existing data about your previous engagement with Ripple Effect to find relevant information for particular activities or to tailor communication. Examples might be:

• That you live in a particular area near to an event or project we are working on
• That you previously gave to a specific appeal (such as a project fundraiser) which we are going to repeat

To send you surveys, and for market research purposes

Tools may be used to monitor the effectiveness of our communications with you, including email tracking, which records when an e-newsletter from us is opened and/or how many links are clicked within the message. The data from this tracking is generally used in an aggregated and anonymized form.

Due diligence research

Ripple Effect’s trustees have a duty to ensure that there is no reputational or other risk to the organization in accepting a gift or other support. We may therefore need to carry out research which is necessary to ensure we comply with this duty. For more information on the type of information required and the circumstances when this might apply, you can visit the Charity Commission and refer to Chapter 2, Tool 6: Know your donor

It is our policy not to sell, trade or rent your personal information to anyone. We may disclose personal data to data processors carrying out work on our behalf under a Non-Disclosure Agreement. Any such companies are acting as approved data processors for Ripple Effect Kenya, and we retain full responsibility for your personal data. Data processors will act only on our instructions.

Any data transferred outside of Kenya will be done following the regulations of the Kenyan Data Protection Act 2019.

If this is the case we will store your personal data securely on our servers in the EU and under the regulations imposed by the UK GDPR Data protection act 2018. Where this data is to be transferred outside of the European Union we will make sure we have your consent to do this to.

We will keep your personal information on our database for 6 years following your last interaction with us.

We will ensure that we hold the minimum amount of data to meet the purposes of supporting Ripple Effect Kenya’s charitable mission and we might hold historical data for analysis in an anonymized format so it is no longer linked directly to your personal information.

You can ask us if we are keeping any personal data about you and you can also request to receive a copy of that personal data – this is called a Subject Access Request.

To make a Subject Access Request you will need to provide adequate proof of identity such as a copy of your passport, birth certificate, ID card, or driving license before your request can be processed. Please try to be as clear as possible about the information you are seeking.

Once we have received your Subject Access Request and proof of identity, you will receive a response from us within one month and you will be able to get copies of any information we hold on you. However, exemptions to disclosure may apply in some circumstances.

Subject Access Requests should be sent to your local Ripple Effect Kenya office at the details above or to dataprotection@rippleeffect.org

Please note that repeated requests for a Subject Access Request could be subject to a small administrative charge to cover our costs.

Please contact your local Ripple Effect Kenya office on the details above or email dataprotection@rippleeffect.org to make any updates to your information.

Ensuring we have the right personal information is really important to us. If you wish to correct any information about you held by Ripple Effect Kenya, please contact us on the details above

If you want to ask us to stop processing your personal data, we may continue to store your data to meet financial and other requirements. We will retain enough of your personal information to ensure that your request can be respected in the future.

If you want us to delete your data, please note that permanently removing your details means that we cannot guarantee to not contact you as we will no longer hold a record of your request.

We regularly review our privacy practices and this notice, and may make changes from time to time. Any changes made will be posted to this page on our website, and will apply from the time we post them. We will inform you directly of any significant changes.

This privacy notice was last updated on 13/03/2023

We value feedback and you have a right to object to how we process your personal information at any time. If you have a concern, please contact your local Ripple Effect Kenya office in the details above or email dataprotection@rippleeffect.org

If you wish to lodge a complaint or seek advice from a supervisory authority, please contact your local supervisory authority on the details below

info@odpc.go.ke

P.O Box 30920-00100

G.P.O Nairobi

0796954269/ 0752896867

https://www.odpc.go.ke

In order to make the Ripple Effect website easier to use and improve our service, we sometimes place small amounts of information on your computer. These are known as cookies and they are used by most major websites. We use cookies, small pieces of data stored inside a website browser, across our websites to improve their performance and to enhance your user experience. When you visit our websites, cookies allow us to collect some non-identifying basic information. This includes the total number of visitors, the pages viewed, and other anonymous information. We use this information to make your experience on our website as smooth as possible and to allow us to make any necessary improvements. Click here to find out more about the different cookies we use.

Necessary cookies 

These cookies are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Without these cookies, services you have asked for, like shopping baskets or e-billing, cannot be provided.

Performance cookies 

These cookies allow us to analyse how visitors use our websites and to monitor website and campaign performance so that we can provide a high quality experience and determine how effective our campaigns are. We may also use cookies at times to evaluate our ordering process and make it as customer friendly as possible.

Functionality cookies 

Our ordering system is set up to remember what you are purchasing for only one visit. For example, if you are purchasing several gifts, our system will keep track of what you are purchasing while you make your selections. To allow you to keep the items in your basket, we utilise temporary cookies to process your order.

Targeting cookies

These cookies are used to deliver adverts more relevant to you and your interests They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website so you can be shown more relevant ads. Ripple Effect rarely uses this type of cookie. More detail on how businesses use cookies is available at www.allaboutcookies.org. If you decide you would like to disable cookies on this device, please view our information pages - How to disable cookies. However, please do be aware that some parts of the website will no longer function correctly if you disable cookies

Emails

To enable us to determine which of our emails are more interesting to our users, Ripple Effect emails may contain a single tracking pixel. This pixel can allow us to see whether emails are opened and also which links people click the most. The pixel will be deleted when you delete the email. If you do not wish the pixel to be downloaded to your device, please set your email client to receive plain text emails from us.