Privacy Policy

Privacy & Cookies Policy

Last updated: 20th August 2025

At CTM (Center for Transforming Mission), your privacy is important to us. This policy explains how we collect, use, store, and protect your personal data in line with:

  • The General Data Protection Regulation (GDPR) (EU Regulation 2016/679)
  • The Kenya Data Protection Act (DPA) 2019

  1. Information We Collect

We may collect:

  • Personal Information: name, email, phone number, postal address, payment details, or identification documents (if required by law).
  • Non-Personal Information: browser type, device, and usage data collected automatically through cookies and analytics.

  1. Legal Basis for Processing (GDPR & DPA 2019)

We process your personal data based on:

  • Consent: when you agree to receive updates or newsletters.
  • Contract: to provide services you request (e.g., processing donations, registrations).
  • Legal Obligation: when required by law or regulation.
  • Legitimate Interests: improving our services, website functionality, and security.

  1. How We Use Your Information

We use your data to:

  • Provide and manage services (e.g., donations, event registration).
  • Communicate with you regarding updates, events, and opportunities (with your consent).
  • Comply with legal obligations.
  • Improve security, user experience, and performance of our website.

We will never sell your data to third parties.

  1. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

  • Remember preferences and improve browsing.
  • Measure site traffic and analytics.
  • Ensure secure login and transactions.

You may manage or disable cookies in your browser settings.

  1. Data Storage & Retention

  • We store your data securely using encryption and access controls.
  • We retain your data only as long as necessary for the purpose it was collected or as required by law.
  • When it is no longer needed, data is safely deleted or anonymized.

  1. International Data Transfers

If your data is transferred outside Kenya or the EU, we ensure it is protected by:

  • Countries with adequate data protection laws, or
  • Contracts with appropriate safeguards (e.g., Standard Contractual Clauses).

  1. Your Rights

You have the right to:

  • Access and request a copy of your personal data.
  • Correct or update your data.
  • Withdraw consent at any time.
  • Request deletion (“right to be forgotten”).
  • Object to or restrict processing.
  • Lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or a relevant supervisory authority (EU/EEA).

  1. Children’s Data

We do not knowingly collect personal data from children under 18 without parental/guardian consent.

  1. Third-Party Services

We use trusted third parties (e.g., payment processors, analytics tools) who comply with data protection standards.

  1. Contact Us

If you have questions, requests, or complaints about this Privacy & Cookies Policy, please contact us at:

📧 info@ctmkenya.net
📞 +254 20 522 1983
📍 Zahara Gardens A4 Ngong Rd, Nairobi, Kenya

If unresolved, you may contact the Office of the Data Protection Commissioner (ODPC) Kenya: https://www.odpc.go.ke