Privacy Notice
Draft — pending legal review. This notice describes how the platform is designed to handle personal information. It will be finalised and approved before the Foundation begins processing grant applications.
Who we are
This website is operated by Finstock Foundation. The Foundation’s registered name, address and data-protection contact details will be added here once confirmed.
What information we collect
- When you contact us or submit a form: your name, contact details, organisation and the information you choose to provide, including any documents you attach.
- When you apply for support (when the portal launches): information needed to assess and manage your application, which may include identification, academic, employment, institutional and financial information, as set out in each call.
- When you use the website: limited technical information needed to run and secure the website, such as IP address in security logs.
We ask only for the information we need for the purpose concerned.
How we use it
- To respond to enquiries and proposals
- To assess, award and manage grants and other support
- To meet reporting, audit and legal obligations
- To keep the website and our records secure
- To report on our impact — only in aggregate, or with your explicit consent
How we protect it
Documents you upload are stored privately, outside the public website, and can be accessed only by authorised Foundation staff. Access to private records is restricted by role and logged. We do not sell personal information.
Automated tools
We may use software, including artificial intelligence tools, to help check applications for completeness or to summarise information for reviewers. These tools support human reviewers; they do not make decisions about who receives support.
How long we keep it
We keep information only as long as needed for the purpose it was collected for and for any legal or audit requirements. Closed enquiries and proposals are deleted automatically after a set retention period.
Your rights
Subject to applicable law, including Kenya’s Data Protection Act, 2019, you may ask to be informed about the use of your personal data, to access it, to object to its processing, and to have inaccurate data corrected or data deleted. To make a request, please contact us.
Changes
We will publish any changes to this notice on this page, with the date of the change.