Ngong Road Children’s Foundation (“NRCF”, “we”, “us” , “our”) has developed this Privacy Notice to explain how we collect and use your information as the data controller. We are registered with the Office of the Data Protection Commissioner to ensure we comply with data protection regulations.
Personal Data is any information that can be used to identify you as an individual.
Our legal grounds for processing your personal data
We will only use your personal information (including sharing it with others) in the following situations:-
- You have provided your consent, which can be withdrawn at any time.
- The processing is necessary for the performance of a contract to which you are a party.
- We are required by law to process your data.
- Processing is required to protect your vital interests or those of another person.
- Processing is necessary for the purposes of our legitimate interests, unless such interests are overridden by your rights and interests.
How do we share your personal information?
We may share your personal data with:
- our personnel
- our donor organization, Friends of Ngong Road
- our services providers such as auditors, insurers, professional advisors etc that provide services to us
- our partner organizations who we work with
- our IT systems providers, cloud service providers, database providers and consultants
- any other person that we deem legitimately necessary to share the data with.
The above third parties are required to protect the confidentiality and security of your personal data, in compliance with applicable law. We may also share your personal data, where required by law, and/or relevant authorities.
Do we transfer your personal data outside of Kenya?
Sometimes we might transfer your information and store it in the servers outside Kenya which can also be accessed by the staff, volunteers and board members of Friends of Ngong road (FoNR), our donor organization.
Our processing activities
- Beneficiaries and Alumni
- Board and committee members
- Employees
- Job Applicants
- Sponsors/Donors
- Vendors/Suppliers
- Third parties eg External Trainers, personnel of our focussed schools
- Visitors to our offices
- Individuals in our mailing lists
- Individuals who get in touch with us
Individuals who interact with our beneficiaries
To protect the privacy and safety of our beneficiaries, we ask all visitors to the NRCF offices who interact with our beneficiaries to Sign our Media and Child Protection Policy. This policy outlines some simple rules for interacting with our beneficiaries, such as restrictions on photos and videos.
Here’s what you need to know:
- Taking pictures or videos of our beneficiaries is not allowed, unless you’re their sponsor. Even if you are allowed, please take pictures that show respect for our beneficiaries.
- We may use your photos for promotional purposes with your consent.
- You’ll agree to follow our child protection guidelines.
How long will we keep your information?
We only keep your personal data for as long as we need it for the reason it was collected. Personal data may be held for longer periods where required by law or regulation and in order to establish, exercise or defend our legal obligations.
Keeping Your Information Safe
We use strong technology and security measures to protect your personal information from being lost, misused, changed, or destroyed. Only authorized people can access your information.
Unfortunately, even with all our efforts, there’s always a chance that information could be accessed by someone unauthorized. NRCF has developed a data breach response plan to ensure we can quickly identify and address any security incidents that may affect your personal information. If you suspect that your information may have been compromised in a data breach, we encourage you to report it immediately. You can easily report a suspected breach by filling out a simple online form on our website. Alternatively, you can contact our Data Protection Officer directly by emailing [email protected]. We appreciate your cooperation in helping us maintain a secure environment for your information.
What are your rights?
In general, you have the following rights:
- You can get an overview of what personal data we have about you
- You can get a copy of your personal data in a structured, commonly used and machine- readable format
- You can get an update or correction to your personal data
- You can have your personal data deleted or destroyed
- You can have us stop or limit processing of your personal data
- If you have given consent for us to process your personal data, you can withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdraw your consent
These rights might not apply in every situation, depending on the reason your information is being used. If you have any questions or want to exercise these rights, contact us at [email protected].
What is the complaints procedure?
Have a concern about how we use your information? Here’s how to file a complaint:
- Send a detailed email outlining your issue to the Data Protection Officer (DPO) at [email protected].
- Once we receive your email, we’ll send you a quick confirmation and let you know how long it might take to resolve your complaint.
- We’ll carefully investigate your concerns and may contact you for more information if needed.
- After the investigation, the DPO will inform you of the outcome and any steps we’ll take to address your concerns.
- If your complaint is valid, we’ll take all necessary actions to fix the situation.
Privacy notice updates
We may update this privacy notice at any time by publishing an updated version here. You can access the most current version of this privacy statement at any time on this site.
Contact us
If you have questions about this privacy notice or about our privacy practices, please contact us at [email protected].