Privacy Policy
Effective Date: 29 June 2026 | Last Updated: 29 June 2026
This policy applies to the InukaMama website and all associated programmee activities.
1. WHO WE ARE
InukaMama is a community-based non-profit initiative dedicated to empowering young mothers in underserved communities across Kenya through vocational skill training, social mentorship, financial literacy, and business development support.
Website: inukamama.org
Organisation: InukaMama
Physical Address: Matasia, Kajiado, Kenya
Phone: +254 745 960 754
Email: support@inukamama.org
InukaMama is the data controller responsible for the personal information collected through this website and its programmes.
This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have under Kenyan law.
2. LEGAL FRAMEWORK
This Privacy Policy is prepared in compliance with the following Kenyan laws and regulations:
• Data Protection Act, 2019 (No. 24 of 2019)
• Data Protection (General) Regulations, 2021
• Data Protection (Registration of Data Controllers and Data Processors) Regulations, 2021
• Children Act, 2022 (No. 29 of 2022) - applicable to participants under 18
• Constitution of Kenya, 2010 - Articles 31 (right to privacy) and 53 (rights of children)
Where our website is accessed by users in other jurisdictions, we comply with applicable local law to the extent required. Users outside Kenya should be aware that their data will be processed in Kenya and that data protection standards may differ from those in their home country.
3. WHAT PERSONAL DATA WE COLLECT
3.1 Data You Provide Directly
• Names (first and last) submitted via our contact form or mailing list subscription
• Email addresses submitted via the contact form, mailing list, or programme registration
• Phone numbers submitted via the contact form
• Messages and enquiries submitted through the website contact form
• Files uploaded through the website contact form
• Payment information submitted via the Donate page (processed securely through our payment provider — InukaMama does not store raw card or payment details)
• Programme participant details collected through offline consent and registration forms
3.2 Data Collected Automatically
• Website usage data including pages visited, time spent on pages, and navigation patterns
• Device and browser information (type, operating system, screen resolution)
• IP address and approximate geographic location derived from it
• Referral source (how you arrived at our website)
• Cookie and tracking data as described in Section 6 below
3.3 Special Category Data
InukaMama serves teenage mothers, which means some programme-related information may touch on sensitive personal circumstances such as age, parental status, or socioeconomic situation. This data is collected only through offline programme forms with explicit consent and is never collected through the website without a clear, separate consent process.
4. WHY WE COLLECT YOUR DATA AND OUR LEGAL BASIS
Responding to enquiries via the contact form
Data used: Name, email, phone, message
Legal basis: Consent / Legitimate interest
Sending programme updates and newsletters to mailing list subscribers
Data used: Name, email address
Legal basis: Consent
Processing donations via the Donate page
Data used: Name, email, payment details (via payment processor)
Legal basis: Contract / Legal obligation
Administering mentorship programme participation
Data used: Participant personal details (offline)
Legal basis: Consent / Legal obligation
Improving our website and user experience
Data used: Usage data, cookies
Legal basis: Legitimate interest
Complying with legal and regulatory obligations
Data used: All relevant data
Legal basis: Legal obligation
Safeguarding participants, especially minors
Data used: Participant data (offline)
Legal basis: Legal obligation (Children Act, 2022)
5. HOW WE SHARE YOUR DATA
InukaMama does not sell, rent, or trade your personal data. We may share data only in the following limited circumstances:
• With our website platform provider (Wix.com), which hosts and operates our website infrastructure. Wix processes data as a data processor on our behalf and is subject to its own privacy obligations.
• With our payment processor for the purpose of securely processing donations made through the Donate page. InukaMama does not receive or store raw payment card data.
• With programme partners and collaborators (such as Greenland Girls High School and the Matasia Chief's Office) strictly for the purpose of delivering programme activities, and only with participant consent.
• With regulatory authorities or law enforcement where we are legally required to do so under Kenyan law, including mandatory reporting obligations under the Children Act, 2022.
• With third-party analytics providers (such as Wix Analytics or Google Analytics) in anonymised or aggregated form for the purpose of understanding website usage. These providers do not receive your name or contact details.
Any third party with whom we share data is required to handle it in accordance with the Data Protection Act, 2019 and applicable data protection standards.
6. COOKIES AND TRACKING TECHNOLOGIES
Our website is built on the Wix platform, which uses cookies and similar tracking technologies. Cookies are small text files placed on your device when you visit our website.
Essential Cookies
Required for the website to function correctly (e.g. navigation, security, form submissions). Provider: Wix.com
Analytics Cookies
Help us understand how visitors use our website so we can improve it. Data is collected in aggregate form. Provider: Wix Analytics / Google Analytics
Functional Cookies
Remember your preferences and settings to improve your experience. Provider: Wix.com
Third-Party Cookies
May be placed by embedded content or social media integrations (e.g. Instagram feed, social sharing buttons). Provider: Meta, Google, and others
Managing Cookies
You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect the functionality of our website.
When you first visit our website, you will see a cookie notice. You may also manage your preferences through the "Privacy Preferences" option displayed on the site.
We recommend reviewing Wix's own Privacy Policy at wix.com/about/privacy for full details of their data processing practices.
7. DONATIONS AND PAYMENT DATA
InukaMama accepts donations through the Donate page on our website. All payment transactions are processed through a third-party payment provider integrated by Wix. We do not collect, store, or have access to your full payment card details.
When you make a donation, the payment provider collects and processes your payment data in accordance with their own privacy policy and applicable financial regulations, including PCI-DSS compliance requirements.
We retain your name and email address associated with a donation for the purposes of issuing acknowledgement communications and maintaining our financial records as required by law. Donation records may be retained for up to seven (7) years to satisfy legal and audit obligations.
8. HOW LONG WE KEEP YOUR DATA
We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law.
Contact form submissions: 2 years from date of submission, unless an ongoing relationship is established
Mailing list subscriptions: Until you unsubscribe. You may unsubscribe at any time via the link in any email.
Donation records: 7 years, to comply with financial and legal obligations
Programme participant records: 5 years from programme completion, or as required by applicable law
Website usage / cookie data: As set by the cookie provider (typically 30 days to 2 years depending on cookie type)
After the applicable retention period, data is securely deleted or anonymised.
9. HOW WE PROTECT YOUR DATA
InukaMama takes the security of your personal data seriously. We implement the following safeguards:
• Our website is hosted on the Wix platform, which provides SSL/TLS encryption for all data transmitted between your browser and our website
• Access to programme participant data is restricted to authorised InukaMama personnel and volunteers on a need-to-know basis
• Physical forms containing personal data are stored securely and accessible only to authorised staff
• Payment data is handled exclusively by our PCI-DSS compliant payment processor and is not stored on our systems
• We conduct periodic reviews of our data handling practices
No method of electronic transmission or storage is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security. If you believe your personal data has been compromised, please contact us immediately at support@inukamama.org.
10. YOUR RIGHTS UNDER THE DATA PROTECTION ACT, 2019
Under the Data Protection Act, 2019, you have the following rights with respect to your personal data:
Right to be informed
You have the right to know how your personal data is collected and used. This Privacy Policy fulfils that obligation.
Right of access
You may request a copy of the personal data we hold about you.
Right to rectification
You may request that inaccurate or incomplete data be corrected.
Right to erasure
You may request deletion of your data, subject to our legal retention obligations.
Right to restriction
You may ask us to limit how we use your data in certain circumstances.
Right to data portability
You may request your data in a structured, commonly used, machine-readable format.
Right to object
You may object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.
To exercise any of these rights, please contact us at support@inukamama.org. We will respond within 21 days as required by the Data Protection Act, 2019. We may need to verify your identity before processing a request.
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at www.odpc.go.ke.
11. CHILDREN AND MINORS
InukaMama's programme serves teenage mothers, some of whom may be under the age of 18. We are deeply committed to protecting the privacy and welfare of minors in accordance with the Children Act, 2022 and the Data Protection Act, 2019.
• Our website is not directed at children below the age of 13. We do not knowingly collect personal data from children under 13 through our website.
• For programme participants under 18, all data collection is conducted offline with the written consent of a parent or legal guardian, as required by law.
• If we become aware that we have inadvertently collected personal data from a child under 13 without appropriate consent, we will delete it promptly.
Parents or guardians who believe their child's data has been collected without appropriate consent should contact us immediately at support@inukamama.org.
12. THIRD-PARTY LINKS AND SOCIAL MEDIA
Our website contains links to third-party websites and embeds social media content including Instagram. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any external websites you visit.
Our social media pages on Instagram, Facebook, Twitter/X, LinkedIn, YouTube, and TikTok are operated on those platforms' own terms. Information you share or interact with on those platforms is governed by their respective privacy policies, not this one.
13. INTERNATIONAL DATA TRANSFERS
Our website is hosted by Wix.com, which operates globally and may process your data on servers located outside Kenya. Such transfers are subject to Wix's data transfer safeguards and applicable law. By using our website, you acknowledge that your data may be transferred to and processed in countries other than Kenya.
InukaMama ensures that any international data transfer arrangements meet the standards required under the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the features of our website. When we make material changes, we will update the "Last Updated" date at the top of this document and, where appropriate, notify users by email or via a notice on our website.
We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.
15. CONTACT US
If you have any questions, concerns, or requests relating to this Privacy Policy or the way InukaMama handles your personal data, please contact us:
Organisation: InukaMama
Email: support@inukamama.org
Phone: +254 745 960 754
Physical Address: Matasia, Kajiado, Kenya
Website: inukamama.org
If you wish to raise a complaint about how we have handled your personal data, you also have the right to contact the Office of the Data Protection Commissioner (ODPC):
Website: www.odpc.go.ke
Email: info@odpc.go.ke
Phone: +254 20 2628 000
This Privacy Policy was prepared in accordance with the Data Protection Act, 2019 (Kenya) and the Children Act, 2022.
InukaMama | support@inukamama.org | Matasia, Kajiado, Kenya