Effective Date: 25th January 2025
Last Updated: 25th January 2025
Website: https://philanthropy.gatanga.org
1. Introduction
Philanthropy.gatanga.org (“we”, “our”, “us”) is a community-driven philanthropy and development platform operating under the GatangaORG ecosystem.
The platform supports charitable initiatives, community projects, environmental activities, education support, social welfare programs, fundraising activities, and related philanthropic efforts.
We are committed to protecting personal data and processing information responsibly in accordance with:
• Kenya Data Protection Act, 2019
• EU General Data Protection Regulation (GDPR), where applicable
• Applicable charitable and fundraising transparency principles
This Privacy Policy explains how we collect, use, store, share, and protect personal data when users interact with the platform.
2. Data Controller
For the purposes of applicable data protection laws, the Data Controller is:
George Mathews Ndogo
Founder – GatangaORG
Murang’a County, Kenya
Email: privacy @ gatanga.org
3. Scope of This Policy
This Privacy Policy applies to:
• Visitors to the website
• Donors and contributors
• Volunteers and partners
• Beneficiaries (where applicable)
• Individuals submitting inquiries or project proposals
• Users interacting with fundraising campaigns
4. Personal Data We Collect
4.1 Information You Provide
We may collect:
• Name
• Email address
• Phone number
• Donation details
• Messages or inquiries
• Volunteer registration details
• Project or beneficiary submissions
4.2 Donation and Transaction Information
When donations are made, we may collect:
• Donation amount
• Transaction reference details
• Payment confirmation information
Payment processing is handled through secure third-party payment providers. We do not store full payment card details.
4.3 Automatically Collected Information
When you visit the website, we may collect:
• IP address
• Device type
• Browser type
• Operating system
• Pages visited
• Time spent on pages
• Referral source
4.4 Cookies and Tracking Data
• Cookie identifiers
• Website analytics data
• Advertising or campaign performance data
5. Lawful Basis for Processing
Where GDPR applies, personal data is processed under one or more of the following lawful bases:
• Consent – Newsletter subscriptions, voluntary submissions
• Legitimate Interest – Platform improvement, fraud prevention, transparency reporting
• Contractual Necessity – Processing donations or partnership arrangements
• Legal Obligation – Compliance with financial, regulatory, or audit requirements
Under the Kenya Data Protection Act, all processing is conducted lawfully, fairly, and transparently.
6. How We Use Personal Data
We use personal data to:
• Process and acknowledge donations
• Manage community projects and initiatives
• Communicate with donors, volunteers, and partners
• Provide updates on funded initiatives
• Improve platform functionality and transparency
• Prevent fraud and misuse
• Maintain records for accountability and auditing
We do not sell personal data.
7. Donor Privacy and Transparency
We respect donor privacy.
Donor information will never be sold or shared for marketing purposes without consent.
Where donor recognition is published (for example, acknowledgements or supporter lists), this will only occur with explicit permission.
8. Beneficiary Information
Where beneficiary information is collected or published:
• Only necessary information is collected
• Sensitive personal information is minimized
• Consent is obtained where required
• Information is used strictly for project delivery and transparency purposes
We take special care to protect vulnerable individuals.
9. Cookies and Analytics
We use essential and analytics cookies to:
• Understand website performance
• Improve user experience
• Measure campaign effectiveness
Where required by law, consent will be requested before placing non-essential cookies.
Users may control cookies through browser settings.
10. Data Sharing and Third Parties
We may share limited personal data with trusted third parties including:
• Payment processors
• Hosting providers
• Analytics providers
• Legal or regulatory authorities (where required by law)
All service providers are required to implement appropriate data protection safeguards.
11. International Data Transfers
Some third-party service providers may process data outside Kenya.
Where international transfers occur, appropriate safeguards are applied to protect personal data.
12. Data Retention
We retain personal data only as long as necessary for:
• Donation record keeping
• Legal and financial compliance
• Project accountability and reporting
• Fraud prevention
Data that is no longer required is securely deleted or anonymized.
13. Data Security
We implement reasonable technical and organizational safeguards including:
• Secure hosting environments
• Access control measures
• Encryption where appropriate
• Administrative security practices
In the event of a data breach affecting personal data, relevant authorities will be notified where required by law.
14. Your Rights
Under the Kenya Data Protection Act and GDPR (where applicable), you may have the right to:
• Access your personal data
• Request correction of inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent
• Lodge a complaint with a supervisory authority
Requests may be submitted to:
privacy@gatanga.org
We aim to respond within 30 days.
15. Children and Vulnerable Persons
We do not knowingly collect personal data from children without appropriate consent.
Where projects involve minors or vulnerable individuals, additional safeguards are applied to protect privacy and dignity.
16. Third-Party Links
The website may contain links to external organizations or resources.
We are not responsible for the privacy practices of third-party websites.
17. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes.
Updated versions will be posted on this page with a revised effective date.
18. Contact Information
For privacy-related inquiries:
privacy@gatanga.org
Data Controller: George Mathews Ndogo
Location: Murang’a County, Kenya