Privacy Policy
WATOTO CIAO TRST
This Privacy Policy explains how WATOTO CIAO TRUST, a non-profit organisation based in Nairobi, Kenya, collects, uses, stores, and protects personal data through its website and in the context of its programmes.
The Trust works in the field of rehabilitation, healthcare, social support, and education for children with disabilities and their families. Protecting personal data—especially that of children and vulnerable individuals—is a core responsibility and an integral part of our safeguarding approach.
This Policy is intended to be transparent, easy to understand, and aligned with applicable data protection principles, including the Kenya Data Protection Act, 2019, as well as internationally recognised standards for NGOs.
Who we are and how to contact us
For the purposes of data protection law, the Data Controller is:
Watoto Ciao Trust
Nairobi, Kenya
Email: watotociao@gmail.com
If you have any questions about this Policy or how your data is handled, you may contact us at any time using the details above.
Information we collect
We only collect personal data that is necessary for our work and for responding to your interactions with us.
When you use our website, for example by filling in a contact form or subscribing to updates, we may collect information such as your name, email address, phone number, postal address, and any message or information you choose to provide.
In addition, our website may automatically collect limited technical information such as your IP address, browser type, device information, pages visited, and general usage data. This information is used to ensure the proper functioning and security of the website and to understand how it is used.
In the context of our programmes and services, we may also process more sensitive information related to health, disability, social background, or educational needs. This type of data is only collected and used when strictly necessary for the provision of care, rehabilitation, or support services, and is always handled with enhanced safeguards.
How we use your information
We use personal data for clearly defined and legitimate purposes connected to our mission.
This includes responding to enquiries sent through the website, providing information about our activities, managing communication with families, partners, and stakeholders, and ensuring the effective delivery of our programmes.
We also use limited data to improve our website, understand general usage trends, and ensure technical security. Where users have given consent, we may also send newsletters or updates about our work.
In all cases, we ensure that personal data is not used in ways that are incompatible with these purposes.
Legal basis for processing
We process personal data only when we have a valid legal basis to do so.
This may include your consent, particularly for communications such as newsletters; the need to respond to requests or provide services; compliance with legal obligations; or our legitimate interest in maintaining secure and effective operations.
In the context of health and social care activities, processing may also be justified by the public interest nature of our work and our mandate to provide support to vulnerable children and families.
Sharing of information
We treat personal data with strict confidentiality.
However, in certain cases, we may need to share information with trusted third parties who support our work. These may include medical professionals, social workers, educators, technical service providers, or administrative and legal advisers.
We may also share data with public authorities when required by law.
All third parties are required to respect confidentiality and to process personal data only in accordance with applicable data protection requirements. We do not sell or trade personal data.
International data transfers
Some of our service providers or partners may be located outside Kenya. Where personal data is transferred internationally, we take appropriate steps to ensure that it remains protected, including the use of contractual safeguards and security measures consistent with international standards.
Data retention
We keep personal data only for as long as it is necessary for the purposes for which it was collected.
Contact details are retained only for as long as needed to respond to enquiries or maintain communication. Data related to our programmes may be retained for longer periods where required for operational, legal, or accountability purposes.
When data is no longer needed, it is securely deleted or anonymised.
Cookies and tracking technologies
Our website may use cookies and similar technologies to ensure basic functionality, improve performance, and understand how visitors use the site.
These tools may collect limited technical information, but they do not directly identify users unless explicitly provided.
Users can control or disable cookies through their browser settings, although some parts of the website may not function properly without them.
Your rights
Depending on applicable data protection laws, you may have the right to access your personal data, request correction of inaccurate information, request deletion, object to or restrict processing, withdraw consent where processing is based on consent, and request portability of your data where applicable.
If you are a parent or legal guardian, you may exercise these rights on behalf of a child under your care.
Requests can be sent to: watotociao@gmail.com
We will respond to requests in accordance with applicable legal requirements.
Children and vulnerable persons
Our work focuses primarily on children with disabilities, and we recognise the need for the highest level of protection.
We only process children’s personal data with the consent of a parent or legal guardian, and strictly for purposes related to care, rehabilitation, education, and social support.
Access to such data is strictly limited to authorised personnel, and additional safeguards are applied to ensure confidentiality and protection.
Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.
These measures include access restrictions, secure systems, staff training, and confidentiality obligations for all personnel handling personal data.
Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be published on this page with an updated revision date.
Contact us
If you have any questions or concerns about this Privacy Policy or how we process your personal data, please contact us:
WATOTO CIAO TRUST
Kiambu County, Kabete Sub County, Kingee’ro Village,
P.O. Box 532-00614
Wangige, Kenya