Privacy Policy
Last updated: 9 June 2026
Wema Wealth Africa (“Wema”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit wemawealthafrica.org (“the Website”) or otherwise engage with us as a donor, partner, volunteer, researcher, beneficiary, or member of the public.
This policy is published in line with the Kenya Data Protection Act, 2019 and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
1. Who We Are
Wema Wealth Africa is a national non-governmental organisation, founded in 2020 and formally registered in 2025, dedicated to ending hunger and extreme poverty across Africa by advancing gender equality, social inclusion, climate resilience, and sustainable economic growth.
Data controller: Wema Wealth Africa Registered office: P.O. Box [insert], Nairobi, Kenya Email: info@wemawealthafrica.org Website: https://wemawealthafrica.org
2. Information We Collect
We collect personal information only when it is necessary to deliver our mission, operate our website, or respond to you. The categories we collect include:
a. Information you give us directly
- Name, email address, phone number, organisation, role
- Country or region of residence
- Messages, enquiries, or feedback you send through our website forms or by email
- Donation details, including amount, frequency, and payment-method metadata (we do not store full card numbers — payment is processed by our payment partners)
- Volunteer applications, partnership enquiries, research collaboration requests
- Newsletter subscription preferences
b. Information collected automatically
- IP address, browser type, device type, operating system
- Pages viewed, time on site, referring URL, and approximate location (derived from IP)
- Cookie identifiers and similar technologies (see Section 9)
c. Information from third parties
- Donation processors (e.g. payment gateways) share transaction confirmations
- Social media platforms, if you choose to engage with us through them
- Public databases or registries, where verification is required (e.g. due-diligence checks on partners)
d. Sensitive information We do not collect special-category personal data (health, religion, political views, etc.) unless you explicitly choose to share it — for example, in a story submission, a beneficiary testimonial you have consented to, or a research collaboration. Where we do, we apply additional safeguards.
3. How We Use Your Information
We process personal data only for clearly defined purposes:
- To respond to your enquiries and partnership / volunteer / donation requests
- To process and acknowledge donations and issue receipts
- To send you the Wema Journal newsletter (only if you have opted in) and to invite you to events
- To deliver, evaluate, and improve our programmes
- To produce anonymised impact reports and policy briefs
- To comply with our legal, audit, donor-reporting, and tax obligations
- To safeguard our staff, volunteers, and the communities we serve
- To detect and prevent fraud, abuse, or unlawful activity
- To improve the security, usability, and accessibility of our website
We will never sell your personal data. We will never share your contact details with third parties for their own marketing purposes.
4. Legal Basis for Processing
Under the Kenya Data Protection Act, 2019 and the GDPR, we rely on one of the following legal bases each time we process your personal data:
- Consent — when you tick the newsletter opt-in box or submit a contact form
- Contract — when you donate, partner with us, or apply for a role
- Legal obligation — for audit, tax, regulatory, or safeguarding reasons
- Legitimate interest — to operate the website, communicate with existing donors and partners, improve our programmes, and protect our organisation against fraud
You may withdraw consent at any time by emailing info@wemawealthafrica.org. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
5. Who We Share Information With
We share personal data only with parties that need it to support our mission, and only under written agreements that require equivalent data protection. These include:
- Payment processors that handle donations on our behalf
- Email and CRM platforms that deliver our newsletter and manage our supporter records
- Cloud hosting providers that store our website, database, and backups
- Auditors, professional advisors, and donors to whom we are accountable under contract or law
- Government authorities and regulators, where required by law (for example, the Kenya NGO Coordination Board, the Office of the Data Protection Commissioner, or a court order)
- Implementing partners and community-based organisations where the data is essential to the joint delivery of a programme
We do not transfer personal data to anyone outside these categories without your explicit consent.
6. International Data Transfers
Wema Wealth Africa is headquartered in Kenya. Some of our service providers may process data outside Kenya, including in the European Union, the United Kingdom, and the United States. Where this happens, we ensure adequate safeguards are in place — including Standard Contractual Clauses, adequacy decisions, or your explicit consent — as required by the Kenya Data Protection Act and the GDPR.
7. How Long We Keep Your Information
We keep personal data only for as long as it is needed to fulfil the purposes set out in this policy, or for as long as the law requires.
- Newsletter subscribers — until you unsubscribe, plus 30 days to honour the request
- Donor records — for seven (7) years after the last donation, to meet Kenyan tax and audit requirements
- Partnership and volunteer applications — for three (3) years after the last interaction
- Website analytics — up to fourteen (14) months
- Lead-generation enquiries — for two (2) years, after which they are anonymised
- Beneficiary information — for the duration of the programme plus seven (7) years for evaluation and reporting
After these periods, data is securely deleted or anonymised.
8. Your Rights
Under the Kenya Data Protection Act, 2019 and the GDPR (where applicable), you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete information
- Right to erasure — ask us to delete your personal data (subject to legal retention requirements)
- Right to restrict processing — ask us to pause processing in certain situations
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent — withdraw consent at any time, without affecting prior lawful processing
- Right to lodge a complaint — with the Office of the Data Protection Commissioner of Kenya (https://www.odpc.go.ke), or with your local supervisory authority if you are in the EU/UK
To exercise any of these rights, email info@wemawealthafrica.org. We will respond within thirty (30) days.
9. Cookies and Similar Technologies
Our website uses cookies and similar technologies to:
- Remember your preferences (such as accepted cookies, language)
- Measure how visitors use the website so we can improve it
- Secure forms against spam and abuse
- Deliver embedded content (such as videos, maps, or social media posts)
The cookies we use include:
- Strictly necessary cookies — required for the website to function (no consent required)
- Analytics cookies — anonymised page-view and engagement data (with your consent)
- Functional cookies — to remember preferences and pre-fill forms (with your consent)
- Embedded-content cookies — from third-party providers when you view embedded videos or maps
You can accept or decline cookies through your browser settings or our cookie banner. Declining non-essential cookies will not prevent you from using the website.
10. Children’s Data
Wema Wealth Africa works directly with children and adolescents through several of our programmes. We treat the safeguarding of children’s data as a category of the highest importance.
- We do not knowingly collect personal data from children under 18 through the website without verified guardian consent
- Images, names, or stories of children that appear in our programme materials are published only with documented consent from a parent or guardian and, where age-appropriate, from the child
- In line with our Safeguarding Policy, sensitive information about minors is never published in a way that could identify their location, school, or family without explicit consent
If you believe a child’s information has been published without proper consent, contact info@wemawealthafrica.org immediately and we will investigate and remove it where appropriate.
11. Data Security
We apply administrative, technical, and physical safeguards to protect personal data, including:
- HTTPS / TLS encryption across the website
- Access controls and role-based permissions inside our systems
- Regular software updates and security patches
- Secure offsite backups
- Staff training on data protection and safeguarding
- Written data-processing agreements with all third-party vendors
No system is ever completely secure. While we work hard to protect your information, we cannot guarantee absolute security and we encourage you to use strong passwords and to notify us immediately of any unauthorised access.
12. Third-Party Links
Our website may contain links to third-party websites, plugins, or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before sharing personal data with them.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our operations. The “Last updated” date at the top of this page indicates when it was most recently revised. Material changes will be communicated through a prominent notice on our website or by email to subscribers and donors.
We encourage you to review this policy periodically.
14. Contact Us
If you have questions, concerns, or requests about this Privacy Policy or how we handle your personal data, please contact us:
Email: info@wemawealthafrica.org Postal: Wema Wealth Africa, P.O. Box [insert], Nairobi, Kenya Website: https://wemawealthafrica.org
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (https://www.odpc.go.ke) or, if you are based in the EU or UK, with your local data-protection supervisory authority.