Identity Malkia Initiative
Compliance & Digital Ethics

Privacy Policy

The Malkia Initiative is committed to safeguarding the privacy and personal data of our donors, partners, site visitors, and—most crucially—the adolescent girls and families we serve in Kajiado County. This notice outlines how we collect, process, and protect your information under the Kenya Data Protection Act (2019).

Data Controller Disclosure

Privacy Grounded in Frontline Dignity

Unlike standard web applications, our data operations handle sensitive child welfare records, school re-entry tracking datasets, and financial donor contributions. We treat personal data not as an asset to be monetized, but as a sacred trust that demands bank-grade digital security and ethical restraint.

We never sell, rent, or trade personal information to commercial third parties. All operational datasets are governed by lawful, fair, and transparent processing principles.

Statutory Standard: Kenya Data Protection Act (2019)
Data Controller Reg: ODPC Registered Entity
Effective Date: January 1, 2026

Data Protection Officer

Have inquiries about your records, wish to invoke your right of erasure, or request data access?

Contact DPO Desk
Collection Scope

Information We Collect

1. Donor & Pledge Records

When you sponsor a girl via M-PESA or Card, we process your name, email, phone number, and transaction amount strictly to issue tax-deductible receipts and delivery verifications. We do not store raw card numbers on our servers.

2. Institutional Contact Inquiries

When you submit partnerships, research access, or fellowship inquiries via our portal, we collect your institutional name, affiliation, and message scope to route your request to the right department.

3. Beneficiary Field Data (Strictly Protected)

Field data concerning minors (such as school attendance, literacy scores, and rescue orders) is stored on encrypted, access-restricted servers accessible only to certified safeguarding officers.

Your Rights

Rights Under Kenya Law

1. Right to Access & Correction

You may request a copy of all personal records we hold concerning you and request immediate corrections if details are inaccurate or incomplete.

2. Right to Erasure ("Right to be Forgotten")

You may request that we delete your donor contact information from our active mailing and telemetry systems, subject to national statutory accounting audit laws.

3. Right to Object to Processing

You have the right to withdraw consent from receiving annual reports, newsletters, or campaign updates at any time with a single click or written notice.

Digital Architecture

Security & Cookie Architecture

How our web ecosystem handles local storage and browser communications.

No Commercial Third-Party Trackers

Our digital ecosystem runs on lightweight vanilla PHP, CSS, and JS. We do not use intrusive cross-site tracking scripts or ad-targeting tracking pixels.

Functional LocalStorage Only

We utilize lightweight browser `localStorage` solely to remember your UI display preferences (such as maintaining Dark Mode across page visits).

HTTPS & Transport Encryption

All data exchanged between your browser and our servers is secured using modern TLS encryption protocols, preventing packet interception.

Regulatory Authority

Supervisory Body

If you believe your personal data has been handled in violation of Kenyan law, you have the right to lodge a formal complaint with the national regulator:

Office of the Data Protection Commissioner (ODPC) Britam Tower, 13th Floor, Hospital Road, Nairobi info@odpc.go.ke www.odpc.go.ke
Policy Version 2.4 • Current for 2026

Make a Pledge • Support Malkia