Data Protection

A grant-making organisation is entrusted with sensitive information about people and institutions. We have designed our systems to protect it.

• Minimisation. We collect only what each process needs.
• Private storage. Uploaded documents are held outside the public website and are never given public web addresses.
• Least-privilege access. Staff see only what their role requires. Content editors cannot see applications or private documents.
• Audit trail. Access to private documents and important changes to records are logged.
• Consent. Testimonials, stories and photographs are published only with recorded consent, which can be withdrawn.
• Retention. Information is kept only as long as necessary and then deleted.
• Your rights. You can ask for a copy of your data or ask us to correct or delete it.

We have designed the platform with Kenya’s Data Protection Act, 2019 in mind. Read our Privacy Notice for details, and contact us with any questions.