Effective Date: January 14, 2026
Last Updated: January 14, 2026
Elimisha Charity Campaign ("we," "us," or "our") is committed to protecting your privacy and personal data in compliance with the Data Protection Act, 2019 (Kenya) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, register as a member, make donations, or use our services.
Data Controller:
Elimisha Charity Campaign
Email: [email protected]
Phone: +254 708012586 / +254 768879680
We process your personal data under the following legal bases:
When you register as a member of Elimisha Charity Campaign, we collect personal information necessary to create and maintain your membership account. This includes your full name, email address, and phone number for communication purposes. We also collect your ID type and number (such as National ID or Passport) to verify your identity and maintain accurate membership records. By completing the registration process, you provide explicit consent to our Terms and Conditions.
For donation transactions, we collect your email address to send you donation receipts and updates about how your contribution is being used. The donation amount you choose to contribute is recorded for transparency and reporting purposes. All payment information, including card details and M-Pesa transactions, is securely processed through Paystack, our PCI-DSS compliant payment processor. We never store sensitive payment credentials on our servers.
When you visit our website, certain technical information is automatically collected to help us improve your browsing experience and maintain website security. This includes your IP address, which helps us understand geographic distribution of our visitors and detect potential security threats. We also collect information about your browser type and version, device information, and which pages you visit during your session. This data is used solely for analytics, troubleshooting, and improving our website's performance and user experience.
With your consent, we use Google Analytics to understand how visitors use our website, for example which pages are visited and how people find us. Google Analytics sets cookies in your browser and is only loaded after you choose "Accept" on our cookie banner. We do not use advertising cookies and we never send your name, email address or phone number to Google Analytics. If you choose "Decline", Google Analytics is not loaded. To change your choice later, clear this website's data in your browser and the banner will appear again. We also store small preferences in your browser, such as your shopping cart, which are not used for tracking.
We use the personal information we collect to provide you with our services and fulfill our charitable mission. For membership services, your information is used to process your registration, generate a unique Member ID, and send you welcome emails and confirmation messages. We maintain a member directory that allows fellow members to connect and collaborate on our charitable initiatives. Your contact information enables us to keep you informed about upcoming events, volunteer opportunities, and the impact of our collective efforts.
When you make a donation, we process your payment securely through our payment processor and immediately send you a receipt for your records. We track donations to specific campaigns to ensure transparency and accountability in how funds are allocated and used. If you require tax receipts for your donations, we can provide these upon request in accordance with Kenyan tax regulations.
We communicate with you through service-related emails about your membership status, donation confirmations, and important updates about our organization. We respond promptly to any inquiries you submit through our contact forms or email. With your explicit consent, we may also send you newsletters featuring stories of impact, upcoming campaigns, and opportunities to get more involved with our mission.
We work with carefully selected third-party service providers to help us deliver our services effectively. These providers are contractually obligated to protect your data and use it only for the specific purposes we authorize. We ensure all third-party processors comply with applicable data protection laws and have appropriate security measures in place. Examples include our payment processor (Paystack), email service providers, and web hosting services.
We may disclose your information if required by law, court order, or government authority. This includes compliance with legal processes, responding to lawful requests from public authorities, and protecting our rights and the safety of our members and the public.
Certain information is made publicly available on member profiles to facilitate community building and collaboration. This includes your full name, Member ID (e.g., ELM-ABC123), and membership status. However, we never publicly share sensitive information such as your email address, phone number, or ID number. These details remain private and are only accessible to authorized administrators for legitimate organizational purposes.
Your financial security is our top priority. All payment transactions are processed by Paystack, a PCI-DSS compliant payment processor that meets the highest standards of payment security. We never store sensitive payment credentials on our servers. This means we do not have access to or store your credit/debit card numbers, CVV codes, card expiry dates, or M-Pesa PIN. All payment data is encrypted and securely transmitted directly to Paystack's servers, ensuring your financial information remains protected at all times.
Under the Data Protection Act, 2019, you have comprehensive rights regarding your personal data. You have the right to access a copy of all personal data we hold about you. If any of your information is inaccurate or incomplete, you have the right to request corrections. You may also request that we delete your personal data, subject to any legal obligations we may have to retain certain information.
You can restrict how we process your data or object to processing based on legitimate interests. If you wish to transfer your data to another organization, you have the right to receive your personal data in a machine-readable format. Additionally, you can withdraw any consent you've previously given us at any time, though this won't affect the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights: To exercise any of these rights, please email us at [email protected] with the subject line "Data Subject Rights Request". We will respond to your request within 30 days and may need to verify your identity before processing your request.
We implement comprehensive technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. All data transmission between your browser and our servers is encrypted using HTTPS protocol. Our databases are secured with access controls that limit who can view or modify your information. We regularly apply security updates and patches to our systems to protect against known vulnerabilities. All webhook communications are verified using signature verification to prevent tampering. Additionally, we validate and sanitize all user inputs to protect against injection attacks and other security threats.
Our services are not directed to children under 18. We do not knowingly collect data from children.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.
Data Protection Officer:
Elimisha Charity Campaign
Email: [email protected]
Phone: +254 708012586
Office of the Data Protection Commissioner (Kenya):
Website: https://www.odpc.go.ke
Email: [email protected]
Phone: +254 20 2675 000
Last Updated: January 14, 2026
Version: 1.0
© 2026 Elimisha Charity Campaign. All rights reserved.