How the Amb. Ukur Yatani Official Website handles your personal data.
Effective date: 12 June 2026
Governing law: Republic of Kenya
This Privacy Policy explains how the Amb. Ukur Yatani Official Website (“Website”, “Platform”, “we”, “our”, or “us”) collects, uses, stores, protects, and discloses personal data obtained from users of the Website.
We are committed to protecting your privacy and processing personal data in accordance with the laws of the Republic of Kenya, including:
- The Constitution of Kenya, 2010 (Article 31 — Right to Privacy)
- The Kenya Data Protection Act, 2019
- Regulations and guidance issued by the Office of the Data Protection Commissioner (ODPC)
- The Computer Misuse and Cybercrimes Act, 2018
- Any other applicable Kenyan laws and regulations
By using this Website, you consent to the practices described in this Privacy Policy.
1. About the Website
The Website serves as a digital communication and public engagement platform that enables users to:
- Access information and updates;
- Register as volunteers;
- Make donations;
- Participate in campaigns, events, and civic engagement activities;
- Subscribe to updates and communications.
2. Personal Data We Collect
We only collect personal data that is necessary, lawful, and relevant to the purposes outlined in this Policy.
2.1 Information You Voluntarily Provide
When interacting with the Website, including through the volunteer and donation pages, we may collect:
Identification Information:
- Full name
- National ID or identification details where applicable
- Gender (where voluntarily provided)
- County, sub-county, ward, or constituency
Contact Information:
- Phone number
- Email address
- Postal or physical address where applicable
Volunteer Information:
Through the volunteer registration page, we may collect:
- Skills and expertise
- Areas of interest
- Availability and participation preferences
- Organization or affiliation where applicable
Donation Information:
Through the donation page, we may collect:
- Donation amount
- Transaction references
- Billing information
- Payment confirmation details
Sensitive payment credentials are handled by secure third-party payment service providers and are not intentionally stored unless legally required.
Communication Information:
- Messages submitted through contact forms
- Survey responses
- Feedback and inquiries
3. Automatically Collected Information
When you visit the Website, certain technical information may be automatically collected, including:
- IP address
- Browser type and version
- Device information
- Operating system
- Referral URLs
- Pages visited
- Date and time of access
- Website usage analytics
This information helps improve Website performance, security, and user experience.
4. Cookies and Tracking Technologies
The Website may use cookies and similar technologies to:
- Improve Website functionality;
- Remember user preferences;
- Analyze Website traffic and engagement;
- Enhance security and fraud prevention.
Users may disable cookies through browser settings, although certain Website features may not function properly.
5. Purpose of Processing Personal Data
We process personal data for legitimate and lawful purposes, including:
- Managing volunteer registration and coordination;
- Processing donations and maintaining accountability records;
- Responding to inquiries and communication requests;
- Sending updates, announcements, and campaign communications;
- Organizing events and outreach activities;
- Improving Website functionality and user experience;
- Preventing fraud, abuse, and unauthorized access;
- Meeting legal, regulatory, audit, and reporting obligations.
We do not process personal data for purposes incompatible with those stated above.
6. Legal Basis for Processing
Personal data is processed based on one or more of the following lawful grounds under the Kenya Data Protection Act, 2019:
- User consent;
- Performance of a legitimate activity requested by the user;
- Compliance with legal obligations;
- Legitimate interests pursued by the Website, provided such interests do not override user rights and freedoms.
7. Consent
Where consent is required, users will be informed before personal data is collected.
Consent must be:
- Freely given;
- Specific;
- Informed;
- Unambiguous.
Users may withdraw consent at any time by contacting us using the details provided in this Policy. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.
8. Sharing and Disclosure of Personal Data
We do not sell personal data.
Personal data may only be shared under the following circumstances:
8.1 Service Providers
With trusted third-party service providers that assist in:
- Payment processing;
- Website hosting;
- Communication services;
- Security and analytics;
- Technical support.
Such providers are required to maintain confidentiality and comply with applicable data protection laws.
8.2 Legal Compliance
Where disclosure is required:
- By law;
- By court order;
- By regulatory authorities;
- For investigation of fraud, cybercrime, or unlawful conduct.
8.3 Protection of Rights and Security
Where necessary to:
- Protect users;
- Protect Website systems;
- Enforce legal rights;
- Prevent misuse or unlawful activity.
9. Data Retention
Personal data shall only be retained for as long as necessary to:
- Fulfill the purpose for which it was collected;
- Meet legal or regulatory obligations;
- Resolve disputes;
- Maintain financial and audit records.
When no longer required, data shall be securely deleted, anonymized, or destroyed.
10. Data Security
We implement reasonable technical and organizational safeguards to protect personal data against:
- Unauthorized access;
- Loss;
- Misuse;
- Alteration;
- Disclosure;
- Cybersecurity threats.
Security measures may include:
- SSL encryption;
- Secure servers;
- Access controls;
- Password protection;
- Monitoring and security reviews.
Despite these safeguards, no online platform can guarantee absolute security.
11. International Data Transfers
Where personal data is processed or stored outside Kenya through third-party service providers, appropriate safeguards shall be implemented in accordance with Kenyan data protection laws.
12. Your Rights Under Kenyan Data Protection Law
Subject to applicable law, users have the right to:
- Be informed about the use of their personal data;
- Access personal data held about them;
- Request correction of inaccurate or incomplete data;
- Withdraw consent;
- Object to processing;
- Request deletion of personal data where applicable;
- Request restriction of processing;
- Lodge complaints with the Office of the Data Protection Commissioner (ODPC).
Requests may be submitted using the contact details below.
13. Children’s Privacy
The Website is not intended to knowingly collect personal data from children without appropriate authorization from a parent or guardian where required by law.
If personal data relating to a child is identified as unlawfully collected, reasonable steps shall be taken to delete it.
14. Third-Party Websites
The Website may contain links to external websites or services. We are not responsible for the privacy practices, content, or security of third-party platforms.
Users are encouraged to review the privacy policies of external websites before providing personal information.
15. Data Breach Response
In the event of a data breach that poses a risk to users’ rights and freedoms, appropriate steps shall be taken in accordance with the Kenya Data Protection Act, including notification to the Office of the Data Protection Commissioner and affected individuals where legally required.
16. Updates to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time.
Any updates shall become effective immediately upon publication on the Website unless otherwise stated. Users are encouraged to periodically review this Policy.
17. Contact Information
For questions, requests, or concerns regarding this Privacy Policy or personal data processing, contact:
Website Administrator
Amb. Ukur Yatani Official Website
Email: info@ukuryatani.com
Phone: +254 700 000 000
You may also contact the:
Office of the Data Protection Commissioner (ODPC)
Britam Towers, Nairobi, Kenya
Email: info@odpc.go.ke