Privacy Policy

Effective Date: May 2025

Barrizi Organisation Kenya ("Barrizi", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website www.barriziorganization.org, make a donation, sign up for our newsletter, or otherwise interact with us. Please read this policy carefully. By using our website or services, you consent to the practices described in this policy.

1. Information We Collect

We collect personal information you voluntarily provide to us, as well as certain technical data collected automatically when you use our website.

Personal information you provide:

• Contact details your name, email address, and phone number when you submit our contact, volunteer, or sponsorship forms.
• Donation and payment data when you make a donation via Stripe or PayPal, we receive transaction confirmation and a limited set of billing details. We do not store full card numbers; all payment processing is handled securely by our certified payment providers.
• Newsletter subscriptions your email address if you subscribe to our updates via Mailchimp.
• Account data if you create a donor or supporter account, we store your login credentials (password stored as a secure hash) and profile information.

Automatically collected technical data:

• IP address, browser type and version, operating system.
• Pages visited, time spent on pages, and referring URLs.
• Cookies and similar tracking technologies (see Section 7 below).

---

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process and acknowledge your donations and send you donation receipts.
• To respond to your enquiries, feedback, or support requests in a timely manner.
• To send you our newsletter, impact updates, and programme news only where you have subscribed or otherwise consented.
• To manage volunteer applications, sponsorships, and partnerships.
• To improve our website, content, and services based on usage analytics.
• To comply with legal obligations and prevent fraud.

---

3. How We Share Your Information

We do not sell, rent, or trade your personal information to any third party for marketing purposes. We may share your data only in the following limited circumstances:

• Payment processors Stripe and PayPal receive the information necessary to process your donation securely. They operate under their own privacy policies and are PCI-DSS compliant.
• Email marketing platform Mailchimp processes your email address if you subscribe to our newsletter. You can unsubscribe at any time.
• Legal requirements We may disclose your information if required to do so by law, court order, or in response to a lawful request by public authorities.
• Organisational protection We may share information to investigate, prevent, or take action regarding suspected illegal activities or violations of our terms.

---

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Specifically:

• Donation and financial records are retained for a minimum of seven (7) years for accounting and regulatory purposes.
• Contact form enquiries are retained for up to two (2) years.
• Newsletter subscriber data is retained until you unsubscribe.
• Website analytics data is retained in aggregated, anonymised form for up to three (3) years.

---

5. Your Rights

Depending on your location, you may have the following rights with respect to your personal data:

• Right of access You may request a copy of the personal data we hold about you.
• Right to correction You may request that we correct any inaccurate or incomplete data.
• Right to deletion You may request that we delete your personal data, subject to our legal retention obligations.
• Right to object You may object to the processing of your data for direct marketing at any time.
• Right to data portability You may request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at support@barriziorganization.org. We will respond within 30 days.

---

6. Cookies Policy

Our website uses cookies small text files stored on your device to improve your browsing experience and analyse site traffic. We use the following types of cookies:

• Essential cookies Required for the website to function correctly (e.g., maintaining your session when logged in).
• Analytics cookies Help us understand how visitors interact with our site so we can improve our content and user experience.
• Functionality cookies Remember your preferences and settings.

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

---

7. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information directly from children. Barrizi Organisation works with children as programme beneficiaries, and in those cases all data relating to child beneficiaries is collected from their parents or legal guardians with explicit consent, and is handled with the highest level of confidentiality in accordance with our Safeguarding Policy.

If you believe we have inadvertently collected personal data from a child without appropriate consent, please contact us immediately at support@barriziorganization.org and we will take prompt action to remove it.

---

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include secure HTTPS encryption for all data transmitted via our website, restricted access controls, and secure third-party payment processing via Stripe and PayPal.

However, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and to notify us immediately if you suspect any unauthorised use of your account.

---

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your data. Your continued use of our website after any changes constitutes your acceptance of the updated policy.