Utafiti Wellness Research Association (UWRA) is committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, share, and safeguard your data when you interact with us — whether through our website, donations, events, or communications.
Last updated: June 22, 2026 · Effective for all interactions on or after this date.
1. Information We Collect
We may collect the following categories of personal data:
- Identity Data: Name, title, date of birth, gender, and professional affiliation (if applicable).
- Contact Data: Email address, phone number, postal address, and social media handles (if provided).
- Financial Data: Payment details (processed securely by our payment partners; UWRA does not store full card information).
- Technical Data: IP address, browser type, device information, and website usage patterns (via cookies).
- Communication Data: Your preferences, feedback, inquiries, and any other information you choose to share.
2. How We Use Your Data
UWRA uses your personal data for the following purposes:
- Process donations and issue tax receipts.
- Keep you informed about our programs, events, and impact (with your consent).
- Respond to your inquiries and provide donor support.
- Improve our website, services, and communications.
- Comply with legal, regulatory, and reporting obligations.
3. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Consent: You have given us clear consent to process your data for specific purposes (e.g., sending newsletters).
- Contract: Processing is necessary for a contract you have with us (e.g., donation or registration).
- Legal Obligation: We are required to process data to comply with the law (e.g., tax reporting).
- Legitimate Interest: We have a legitimate interest in processing your data for purposes that are not overridden by your rights and interests (e.g., improving our services).
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal data. We may share your information with:
- Service Providers: Trusted third parties who assist us with payment processing, email delivery, and IT support (all bound by strict confidentiality agreements).
- Legal Authorities: When required by law, court order, or to protect the rights, safety, or property of UWRA or others.
- Partners: With your explicit consent, we may share data with partner organizations for collaborative programs or events.
5. Data Security
UWRA implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These include:
- Encryption of data in transit (SSL/TLS) and at rest where feasible.
- Access controls and role-based permissions for staff.
- Regular security assessments and staff training on data protection.
- Secure disposal of data when no longer required.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically:
- Donor records are retained for 7 years to comply with tax and audit regulations.
- Newsletter subscription data is retained until you unsubscribe.
- Inquiries and communications are retained for 3 years after resolution.
7. Your Rights
Under data protection laws (including the Kenya Data Protection Act, 2019), you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct any inaccurate or incomplete data.
- Erasure: Request deletion of your data (where legally permissible).
- Restriction: Limit how we process your data.
- Objection: Object to processing based on legitimate interests or direct marketing.
- Portability: Request transfer of your data to another organization.
To exercise any of these rights, please contact us using the details in Section 10 below. We will respond within 30 days.
8. Cookies & Tracking
Our website uses cookies to enhance your experience, analyze traffic, and improve our content. We use:
- Essential Cookies: Required for basic site functionality.
- Analytics Cookies: To understand how visitors interact with our site (via Google Analytics).
- Preference Cookies: To remember your settings and preferences.
You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect site functionality.
9. Children's Privacy
UWRA does not knowingly collect personal data from children under the age of 16 without parental consent. If you believe we have inadvertently collected data from a child, please contact us so we can promptly delete it.
10. Contact Us
If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact our Data Protection Officer:
11. Updates to This Policy
UWRA may update this Privacy Policy from time to time to reflect changes in technology, regulation, or our operations. We will notify you of significant changes via email (if we have your contact) or through a prominent notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.
Our Commitment: UWRA is dedicated to safeguarding your privacy and ensuring that your personal data is handled with the utmost care and respect. By interacting with us, you trust us with your information — and we take that trust seriously.
Back to Donation Policy
