Legal
Privacy Policy
Last updated: 15 August 2026
DSO Kenya (Registered CBO · Kenya)
This policy explains how DSO Kenya (“we”, “us”) handles personal data in connection with the Kipaji Challenge / Unfinished Talent Challenge campaign website and related outreach. It aligns with Kenya’s Data Protection Act, 2019, the Digital Health Act, 2023 and 2025 Regulations, the Computer Misuse and Cybercrimes Act, 2018, and good fundraising practice.
1. Who we are
DSO Kenya is a registered Community-Based Organisation under Kenyan law. We are registered as a Data Controller with the Office of the Data Protection Commissioner (ODPC). Contact: info@dsokenya.com, +254 718 339139, or WhatsApp via the numbers published on this site. Website: https://www.dsokenya.com.
2. Data we may collect
- Contact & outreach — name, phone, email, or WhatsApp handle when you message us about the challenge or donations.
- Donation references — M-Pesa transaction references or amounts you share with us (we do not process card payments on this microsite).
- Campaign participation — public social posts you tag with campaign hashtags / @DSOKenya (content you chose to publish).
- Technical data — limited device / browser data via essential cookies or similar storage; optional analytics only if you consent (see Cookie Policy).
We do not ask for medical records on this campaign site. Do not send sensitive health details of named patients unless you have a lawful basis and our express instruction.
3. Why we use data
- Run and promote the Kipaji Challenge.
- Respond to join / donate / support requests.
- Acknowledge gifts and provide basic transparency updates.
- Moderate harmful or off-message tagged content.
- Improve site reliability and (with consent) understand reach.
- Meet legal, audit, and CBO accountability duties.
4. Lawful bases
Depending on the activity: your consent (e.g. optional cookies, WhatsApp contact), performance of a request you initiate, legitimate interests in running a public fundraising campaign, and legal obligation where applicable under Kenyan law.
5. Sharing
We do not sell personal data. We may share limited information with:
- Service providers hosting this site or messaging tools.
- Payment ecosystems (e.g. Safaricom M-Pesa) as required to process gifts you send.
- Professional advisors or authorities when legally required.
Partner hospitals and clinical pathways are governed under separate care / Data Protection arrangements — not by tagging a talent video.
6. Retention
We keep contact and donation-related records only as long as needed for the campaign, accounting, and legal retention, then delete or anonymise them where practical.
7. Your rights
Subject to the Data Protection Act 2019, you may request access, correction, deletion, objection, or restriction, and withdraw consent where processing is consent-based. Contact info@dsokenya.com. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.
8. Children
The campaign targets a general audience. If you are under 18, participate with a parent/guardian’s guidance. We do not knowingly collect children’s data for marketing.
9. Security
We use reasonable technical and organisational measures. No online method is perfectly secure; use official paybill details only from this site or DSO Kenya channels.
10. Updates
We may update this page; the “Last updated” date will change. Material changes will be reflected here.
Also see our Cookie Policy and Challenge Rules.