Effective Date: December 15, 2017 | Last Updated: November 21, 2025
Duncano Foundation ("we", "our", "us") is committed to protecting your privacy and handling your personal data in accordance with the Kenya Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021. This Privacy Policy explains how the website www.duncanofoundation.org ("Site") collects, uses, stores, discloses, and protects personal data. By accessing or using this Site, you consent to the practices described in this Policy.
For purposes of this Privacy Policy, "personal data" refers to any information that identifies or can identify an individual, as provided under the Data Protection Act. A "data subject" means the individual to whom the data relates. "Processing" refers to any operation performed on personal data, whether automated or manual. Duncano Foundation acts as a "data controller" by determining the purposes and means of processing personal data, while "data processors" are third parties engaged to process such data on our behalf.
We collect personal information that you voluntarily provide, such as your name, email address, phone number, physical address, or organizational details when you contact us, subscribe to updates, or submit information through the Site, including through the "Career Opportunities" section.
We also automatically collect certain technical information when you visit our Site, including your IP address, browser type, device details, pages accessed, duration of visit, and time stamps. This may be done through cookies and similar technologies. You may disable cookies through your browser settings, although some features of the Site may not function properly as a result.
Additionally, we may receive personal information about you from public sources or from third-party partners who support our mission or provide services on our behalf.
We process personal data under various lawful grounds as permitted by the Data Protection Act. These include situations where you provide consent, where processing is necessary to fulfill a service or request you have made, where we pursue legitimate interests such as maintaining the security and functionality of our Site, where the law requires us to process or disclose information, or where processing is necessary to support our mission in the public interest.
We use the personal data we collect to:
We may also use your information to meet legal obligations, ensure the security of our systems, and protect our rights or the rights of others. We do not sell or rent your personal data to third parties.
We may share your personal data with authorized staff, third-party service providers, consultants, or partners who assist us in fulfilling our objectives. These parties may include website hosts, analytics providers, communication platforms, and recruitment partners, all of whom are required to comply with confidentiality and data-protection standards.
Where required by law or court orders, we may disclose your personal data to government authorities or law-enforcement agencies. We may also share information with partner organizations whose mission aligns with ours, but only in accordance with lawful grounds of processing.
If we need to transfer personal data outside Kenya, such transfers will be carried out in compliance with Section 48 of the Data Protection Act. This means we will only transfer data to jurisdictions that offer adequate data-protection safeguards or where there are binding agreements ensuring the secure handling of your data. When required, we will notify you and seek your consent before transferring your data across borders.
We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by Kenyan law, regulatory obligations, or our internal policies. Once the retention period expires, we will securely delete, anonymize, or destroy the information.
Under the Data Protection Act, you have several rights regarding your personal data:
If you believe your data rights have been violated, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
We implement reasonable technical and organizational measures to secure personal data from unauthorized access, loss, misuse, or alteration. These measures include controlled access to databases, secure servers, encryption protocols such as HTTPS, and internal data protection procedures.
However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. You provide information to us at your own risk.
We do not knowingly collect or process personal data belonging to children under the age of 18 without parental or guardian consent. If we discover that such information has been collected without the appropriate authorization, we will delete it as quickly as possible.
Our Site may contain links to external websites operated by third parties. These websites have their own privacy policies and terms of use. We are not responsible for their content, practices, or data-protection standards. You should review the privacy policies of any third-party websites you visit.
If you subscribe to receive updates, newsletters, or communications from us, you may unsubscribe at any time by visiting the unsubscribe link on our website at http://www.duncanofoundation.org/sign-up or by contacting us at info@duncanofoundation.org.
Once unsubscribed, you will no longer receive such communications, although we may still contact you for administrative or legal purposes.
If you have any questions, requests, or concerns regarding this Privacy Policy or wish to exercise your data-protection rights, you may contact our PR & Communications Office at info@duncanofoundation.org.
You may also contact the Office of the Data Protection Commissioner if you believe your rights have not been respected.
We may update or revise this Privacy Policy from time to time to reflect changes in law, technology, or our practices. Whenever we make changes, we will update the "Effective Date" at the top of this document. Your continued use of the Site after such changes indicates your acceptance of the updated Policy.
