Privacy Policy

1. Who We Are

4W'S Inua Jamii Foundation (“we”, “our”, or “the Foundation”) is a community development organisation based in Nairobi, Kenya. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or use our member services.

2. Information We Collect

We may collect the following types of personal information:

• Account information: Full name, email address, phone number, and profile photo when you register.
• Membership data: Membership tier, status, and term dates.
• Donation records: Amount, campaign, and payment reference (we do not store full card numbers).
• Event participation: RSVP history and attendance records.
• Communication: Messages sent through our contact form or support channels.
• Usage data: Pages visited, features used, and general interaction patterns within the platform.

3. How We Use Your Information

• To create and manage your member account and membership card.
• To process donations and issue receipts.
• To send you event notifications, announcements, and newsletters (you can unsubscribe at any time).
• To improve our website, programs, and member experience.
• To comply with legal obligations and resolve disputes.

4. Membership Verification & QR Codes

Your digital membership card contains a QR code linked to a cryptographically signed verification URL. This link allows anyone with a scanner to confirm your membership status without revealing sensitive personal data. Only your name, membership tier, and validity dates are displayed on the public verification page. You can request revocation of your verification token at any time by contacting us.

5. Sharing of Information

We do not sell, trade, or rent your personal information to third parties. We may share data with trusted service providers (such as Supabase for database hosting and M-Pesa for payment processing) solely to operate our platform. These providers are contractually obligated to keep your data confidential.

We may disclose information if required by Kenyan law or a court order.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymise your data within 90 days, except where we are required to retain it by law (e.g., financial records for 7 years under Kenyan law).

7. Security

We implement industry-standard security measures including HTTPS encryption, row-level security in our database, HMAC-signed tokens for membership verification, and access controls limiting who can view your data. No method of transmission over the internet is 100% secure; however, we strive to use commercially acceptable means to protect your personal information.

8. Your Rights

Under the Kenya Data Protection Act (2019), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Withdraw consent for marketing communications.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any of these rights, contact us at privacy@4wsinuajamii.org.

9. Cookies

We use essential session cookies for authentication. We do not use advertising or tracking cookies. You can configure your browser to refuse cookies, but this may prevent you from using authenticated features of the platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered members via email of any material changes. Continued use of the platform after such notice constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: