Privacy Policy
Last updated: September 2026
The Matele Foundation ("we", "us", "our") is committed to protecting the privacy of every person who interacts with our organisation. This policy explains how we collect, use, store, and protect personal data in compliance with Kenya'sData Protection Act, 2019 and the regulations of theOffice of the Data Protection Commissioner (ODPC).
1. Data Controller
The Matele Foundation, based in Sachangwan, Molo Sub-County, Nakuru County, Kenya, is the data controller for the personal data described in this policy. For enquiries, contact us atinfo@thematelefoundation.org.
2. What Data We Collect
- Contact information: name, email address, phone number — when you contact us, register for events, volunteer, or donate.
- Event registration data: name, contact details, dietary/accessibility requirements (optional). For events serving minors, we collect guardian contact details rather than the minor's own.
- Volunteer/mentor applications: name, contact details, skills, availability, motivation.
- Donation information: name (optional), email (for receipt), amount, payment method. We never receive or store card numbers — these are handled entirely by our payment provider.
- Newsletter subscriptions: email address only.
- Media consent records: guardian name and contact where images or stories involve minors.
3. How We Use Your Data
- To process event registrations and send confirmations
- To process and acknowledge donations and issue receipts
- To review and respond to volunteer and partnership applications
- To send newsletter updates (only with your explicit opt-in consent)
- To respond to your enquiries
- To document consent for published photographs and stories
- To improve our services and report on impact (using aggregated, non-identifying data)
4. Children's Data
In compliance with Section 33 of the Data Protection Act, processing of a child's personal data requires the consent of the child's parent or guardian. We collect the minimum data necessary, and any information relating to a minor is treated as sensitive. See our Safeguarding Policy for full details.
5. Data Sharing
We do not sell, trade, or share your personal data with third parties for marketing purposes. Data is shared only with:
- Our payment processing provider (to process donations)
- Our transactional email provider (to send confirmations and receipts)
6. Data Security
We use industry-standard security measures to protect your data, including encryption at rest and in transit, access controls, and regular security reviews.
7. Data Retention
We retain personal data only as long as necessary for the purpose it was collected. Newsletter subscriptions are deleted immediately upon unsubscribe. Event registration data is retained for a limited period after the event. Financial records are retained as required by applicable law.
8. Your Rights
Under the Data Protection Act 2019, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Withdraw consent for processing
- Object to processing
To exercise any of these rights, contact us atinfo@thematelefoundation.org.
9. Cookies
See our Cookie Policy for details on how we use cookies and similar technologies.
10. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top of this page indicates when the most recent changes were made.
Note: This privacy policy is a draft and should be reviewed by a qualified Kenyan data-protection professional before being treated as legally binding.