K-BIAN Kenya Biodiversity Impact Accelerator Network

Privacy policy

This policy explains what personal data Kenya Biodiversity Impact Accelerator Network (K-BIAN) collects through this website, why we collect it, how long we keep it, and the rights you have over it under the Kenya Data Protection Act, 2019.

Who we are

K-BIAN is the data controller for the personal data described in this policy. We are a conservation non-profit registered in Kenya under the Public Benefit Organizations Act, 2013 (registration number NGO-MDU4DL5). You can write to us at:

Kenya Biodiversity Impact Accelerator Network
P.O. Box 1299-50100
Charliks Building, Senator Road, Plot 5434
1st Floor, Room 2B
Kakamega
Kenya

Or email us at info@k-bian.org.

K-BIAN is not registered with the Office of the Data Protection Commissioner (ODPC) as a data controller, and has not appointed a Data Protection Officer.

What we collect, and why

When you send us a message

Our contact form collects your name, email address, an optional telephone number, a subject and your message. We also record the IP address the message was sent from.

We use this to read and reply to your enquiry. The IP address is recorded only to help us identify and block automated abuse of the form. Our lawful basis is your consent, given when you choose to submit the form.

When you subscribe to our newsletter

Our newsletter sign-up collects your email address, optionally your name, and the IP address you subscribed from.

We use a double opt-in process: after you sign up, we send you one email asking you to confirm. If you do not confirm, we will not send you anything further. We use these details only to send you the updates you asked for. Our lawful basis is your consent, which you may withdraw at any time.

Information we do not collect

We do not use advertising trackers, and we do not sell, rent or share your personal data with third parties for their own marketing.

Our fonts are served from our own server rather than from a third-party font service, and embedded videos use YouTube’s no-cookie domain behind a click-to-load placeholder, so no request is made to YouTube until you choose to play a video.

We do not use website analytics. This site collects no visitor statistics and sets no analytics or advertising cookies of any kind.

Cookies

We use a small number of strictly necessary cookies. These keep your session working and protect our forms against cross-site request forgery. They do not track you across other websites.

How long we keep your data

  • Contact form messages are kept for 24 months from the date they are sent, then deleted.
  • Newsletter subscriptions are kept until you unsubscribe. Inactive subscribers — those who have not confirmed, or who no longer engage with our emails — are kept for up to 36 months, then deleted. If you unsubscribe, we keep a record that you did so, so that we do not add you again by mistake.
  • Unconfirmed newsletter sign-ups are deleted if you do not confirm your address.

Who we share it with

This website and our email are hosted by Truehost Cloud, a Kenyan hosting provider, on a single account. Messages you send us and the details you give when subscribing are stored there. Truehost acts on our instructions and may not use your data for its own purposes.

We do not sell, rent or otherwise share your personal data with any other third party. We may disclose personal data where we are required to do so by law.

Your rights

Under the Kenya Data Protection Act, 2019, you have the right to:

  • be informed of how your personal data is being used;
  • access the personal data we hold about you;
  • ask us to correct it if it is inaccurate or incomplete;
  • ask us to delete it;
  • object to how we are using it, or ask us to restrict that use;
  • receive a copy of the data you gave us in a portable format;
  • withdraw your consent at any time.

How to unsubscribe

Every newsletter we send contains an unsubscribe link. Using it stops all further messages immediately.

How to ask us to delete your data

Email info@k-bian.org with the subject line “Data deletion request”, or write to us at the postal address above, and tell us what you would like removed. We will confirm once it is done.

Deletion means deletion: your details are removed from our records, not merely hidden or flagged as inactive. Note that unsubscribing from the newsletter and requesting deletion are different things — if you unsubscribe, we keep a record of your address specifically so we do not contact you again, so tell us if you want that record removed too.

Complaints

If you are not satisfied with how we have handled your personal data, you may complain to the Office of the Data Protection Commissioner of Kenya.

Changes to this policy

If we change this policy, we will update this page.