PRIVACY POLICY
Grassroot Community Development Initiative (CBO)
1. Introduction
Grassroot Community Development Initiative - is committed to protecting the privacy and confidentiality of our members, beneficiaries, partners, donors, volunteers, and stakeholders.
This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the laws of Kenya, including the Data Protection Act, 2019 (Kenya).
2. Information We Collect
We may collect the following types of information:
a) Personal Information
Full name
National ID/Passport number
Phone number
Email address
Postal/Physical address
Gender and date of birth
Next of kin details
b) Organizational Information
Membership details
SACCO or group affiliation
Training participation records
Volunteer records
c) Financial Information
Donation records
Bank or mobile money transaction details (where applicable)
d) Photographs and Media
Photos and videos taken during events, trainings, and community activities
3. How We Use Your Information
We use personal information for:
Registration of members and beneficiaries
Communication regarding programs and activities
Processing donations and financial contributions
Reporting to donors and regulatory authorities
Monitoring and evaluation of projects
Legal and compliance purposes
Child safeguarding and vulnerable group protection
We will not use personal information for purposes unrelated to our objectives without consent.
4. Lawful Basis for Processing
We process personal data based on:
Consent of the individual
Performance of contractual or membership obligations
Compliance with legal obligations
Protection of vital interests
Legitimate interests of the Organization
5. Sharing of Information
We may share information with:
Government authorities where required by law
Donors and funding partners (in compliance with confidentiality obligations)
Partner organizations involved in joint programs
Auditors and legal advisors
We do not sell personal data to third parties.
6. Data Security
Grassroot Community Development Initiative takes reasonable administrative, technical, and physical measures to safeguard personal information against:
Unauthorized access
Loss or theft
Alteration
Disclosure
Access to personal data is restricted to authorized personnel only.
7. Data Retention
We retain personal data only for as long as necessary to fulfill:
Organizational objectives
Legal and regulatory requirements
Financial and audit obligations
After this period, data will be securely destroyed.
8. Children’s Data
Where we work with children or vulnerable persons:
Consent will be obtained from school/parents/guardians.
Child safeguarding policies will be strictly followed.
Sensitive data will be handled with enhanced protection.
9. Your Rights
Under Kenyan law, individuals have the right to:
Access their personal data
Request correction of inaccurate data
Withdraw consent
Object to processing
Request deletion of data (subject to legal limits)
Requests may be submitted in writing to the Organization.
10. Policy Updates
This Privacy Policy may be updated from time to time.
