Privacy & Data Protection

Njoo Dada is a Kenyan not-for-profit organisation, founded in 2014, that supports vulnerable teenage girls and young mothers to move beyond crisis and build independent lives. We operate primarily in Kenya.

This policy covers personal information collected through njoodada.or.ke, including the contact form on this site. It does not cover information we collect in person through our programmes and safe house, which is governed by our internal safeguarding practices.

When you visit our website or use the contact form, we may collect:

• Contact details you give us, such as your name, email address, and phone number if you choose to include it.
• The content of your message, including the topic you select.
• Basic technical information generated automatically as your browser communicates with our hosting provider, such as IP address, browser type, and pages visited.

We do not ask visitors to create accounts or log in, and we do not knowingly collect payment or financial information through this website.

We collect information in two ways:

• Directly from you, when you fill in and submit our contact form.
• Automatically, through standard web server activity as your browser interacts with our hosting provider.

We do not currently use cookies, tracking pixels, or third-party analytics tools on this website. If that changes, we will update this policy to explain what has been added and why.

We use the information you share with us to:

• Respond to your enquiry, question, or message.
• Route your message to the right person or team, based on the topic you select.
• Keep a record of correspondence so we can follow up appropriately.

We do not use contact form submissions for marketing emails or newsletters, and we do not sell or rent personal information to anyone.

Kenya's Data Protection Act, 2019 sets out principles for how personal data should be handled, including lawfulness, fairness, purpose limitation, and data minimisation. We aim to follow these principles in how we handle information submitted through this website.

When you submit our contact form, we rely on your consent, given by ticking the consent box and submitting the form, as the basis for processing your message. You can withdraw that consent at any time by contacting us (see Your Rights below).

Our contact form asks for your name, email address, the topic of your message, and the message itself. This information goes directly to our team and is used only to respond to you.

We do not sell, rent, or trade personal information submitted through this website.

We may share information in limited circumstances:

• With staff or volunteers at Njoo Dada who need it to respond to your enquiry.
• With service providers who help us run this website, such as our hosting provider, who process data on our behalf.
• Where required by law, or to protect the safety of a child or vulnerable person.

We do not currently share information with partner organisations or donors unless you have separately agreed to that as part of a specific programme or relationship.

This website is hosted on Vercel's infrastructure, which processes standard web traffic and server logs as part of delivering the site to you. We do not currently use third-party analytics, advertising, or tracking services.

As our online services grow, we may introduce additional tools, for example email delivery services or donation platforms. We will update this policy before doing so, to explain what has been added and how it affects your information.

We keep contact form submissions for as long as reasonably necessary to respond to your enquiry and maintain a record of correspondence, after which we aim to delete or anonymise the information unless we are required to keep it longer, for example for legal or safeguarding reasons.

We have not yet published a fixed retention schedule for different types of information. We are working on formalising specific retention periods as our data practices mature.

We take reasonable steps to protect the personal information we hold, including:

• Restricting access to contact form submissions to staff who need it to do their jobs.
• Using a reputable hosting provider with its own security practices.
• Reviewing how we handle information as our website and organisation grow.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If you are concerned about the sensitivity of what you are sharing, please contact us directly rather than through the website form.

Under Kenya's Data Protection Act, you generally have the right to:

• Know what personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete information we no longer need.
• Withdraw consent for us to process your information.
• Object to how we are using your information.

To exercise any of these rights, please contact us using the details at the end of this page. We aim to respond to reasonable requests within a reasonable timeframe.

We do not knowingly collect personal information from children through the general contact form without appropriate involvement of a parent, guardian, or responsible adult. If you believe a child has submitted personal information to us directly and you would like it removed, please contact us.

Photographs, videos, and personal stories featured on this website, including images used in our Programmes section, are used with the consent of the individuals involved, or their parent or guardian, where required.

We take particular care with images and stories involving the girls and young mothers we support, to protect their dignity and safety. If you are featured on this website and would like an image or story reviewed or removed, please contact us.

This website may contain links to external sites, such as our social media pages or partner organisations. We are not responsible for the privacy practices or content of those external sites, and we encourage you to review the privacy policy of any external site you visit.

We may update this policy from time to time, for example as our online services grow or our practices change. The “Last updated” badge at the top of this page shows when it was last revised. We encourage you to check back occasionally if you have questions about how your information is handled.

If you have questions about this Privacy & Data Protection Policy or how your information is handled, please contact Njoo Dada.

Email

info@njoodada.or.ke

Phone

+254733816086

Postal address

49773-00100 Nairobi