Privacy Policy

Adopted and last reviewed 14 October 2026. This policy explains how ETCO Kenya ("ETCO", "we", "us") handles personal data. We review it at least once a year, and sooner if the website or our ways of working change.

Who we are

ETCO Kenya is a community organisation based in Soweto East Village, Nairobi, Kenya, 50 metres to the right along Cultures Road from Jesus Winners Church. We handle personal data in line with Kenya's Data Protection Act, 2019.

What information we collect

We collect information you choose to give us directly through this website. That mainly happens through the contact form, where we ask for your name, email address, and the message you write to us. When you submit that form, we also briefly use your IP address to help tell genuine messages from spam and to stop the form being repeatedly submitted. We do not ask for or store payment card details, and donations made by bank transfer or M-PESA are arranged directly with your bank or mobile money provider, not through this website — though we do see the name, phone number, or reference your bank or M-PESA shares with us for a gift, and use it only to record and thank you for it.

If you are under 18, please ask a parent or guardian before contacting us through this website.

People in our stories and photos

ETCO shares field reports and photos about the communities we work alongside in Kibera. We ask for consent before publishing a photo or story that identifies someone, and for a child we ask a parent or guardian, as well as the child, before publishing. We do not publish a child's full name alongside their photo or exact location. If you or your child appear in something we've published and would like it changed or removed, contact us and we will act on that request.

How we use it

We use the information from the contact form to reply to your message, and to keep an internal record of enquiries, partnership requests, and offers of support so that we can follow up on them. We do not sell or rent your information to anyone, and we do not use it for advertising.

Who we share it with

A few outside services help us run this website and are likely to process some of your information as a result: Postmark, which delivers emails from this website, including the acknowledgement you receive after submitting the contact form; Cloudflare Turnstile, which helps tell genuine enquiries from automated spam before a message reaches us, and which receives your IP address to do that; Mapbox, which provides the map on our contact page and may receive your IP address when that map loads; YouTube, which provides video embeds shown on this website and may receive your IP address when a video loads; and Sanity, which hosts the images shown across this website. Each of these providers handles information under their own privacy terms. We do not share your information with anyone else, except a service provider listed here, where we're required to by law, or where we reasonably believe it's necessary to protect someone from serious harm — for example, in response to a safeguarding concern, as described in our Safeguarding Policy.

Cookies and analytics

We don't use analytics or advertising tools on this website, and we don't set tracking cookies ourselves. The map on our contact page and video embeds from YouTube are provided by outside services that may collect basic technical information, such as your IP address, when they load — see "Who we share it with" above. If we add analytics or advertising tools in future, we will update this policy first to explain what is collected and why.

Keeping it secure

Information you send us through this website travels over an encrypted connection, and we take reasonable steps to keep it secure once we receive it.

How long we keep it

We keep contact form enquiries for as long as is reasonably necessary to respond to you and maintain a record of our community relationships, and we remove information we no longer have a genuine reason to hold.

Your rights

You can ask us what information we hold about you, ask us to correct or delete it, object to how we're using it, or withdraw any consent you've given us, by contacting us. We will respond as quickly as we reasonably can. You can also complain to Kenya's Office of the Data Protection Commissioner if you believe we have not handled your information properly.

Contact

Questions about this policy can be sent to hello@etco-kenya.org or through our contact page.