Privacy Policy

FKLM Africa Foundation ("FKLM", "we", "us", "our") is a registered non-profit organisation operating as a continental ecosystem restoration and community resilience platform across Africa. This Privacy Policy explains how we handle personal data collected through our website (fklmafrica.org), newsletter subscriptions, donation forms, volunteer applications, and partnership enquiries.

FKLM Africa Foundation is the data controller for personal data collected through these channels. Where we engage third-party processors (e.g. payment processors, email platforms), we ensure appropriate data processing agreements are in place.

We collect only the data necessary for the purposes described in this policy:

• Contact & enquiry data — name, email address, organisation, and message content submitted via our contact or partnership forms.
• Newsletter subscriptions — email address and, optionally, name and country of residence.
• Donation & funding data — name, billing address, payment reference, and donation amount, processed securely via our payment processor. We do not store card details.
• Volunteer & programme applications — professional background, skills, availability, and any information you voluntarily provide.
• Website analytics — anonymised usage data (pages visited, session duration, device type) collected via privacy-respecting analytics tools. No cross-site tracking identifiers are used.
• Cookies — see Section 7 below.

We use personal data for the following purposes:

• To respond to enquiries and process applications.
• To send our newsletter and programme updates to subscribers who have opted in.
• To process donations and issue receipts or gift-aid declarations where applicable.
• To assess and onboard volunteers, partners, and programme participants.
• To improve our website and communications based on aggregated, anonymised analytics.
• To meet legal and regulatory obligations.

We do not sell, rent, or trade personal data with third parties for marketing purposes.

For individuals in the European Economic Area (EEA), United Kingdom, and other jurisdictions with equivalent data protection laws, we process personal data on the following legal bases:

• Consent — newsletter subscriptions and non-essential cookies.
• Contractual necessity — processing donations and volunteer agreements.
• Legitimate interests — responding to enquiries, improving our services, and preventing fraud.
• Legal obligation — financial record-keeping and regulatory compliance.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

FKLM Africa Foundation operates across multiple African countries and engages with donors, partners, and supporters globally. Personal data may be transferred to and processed in countries outside your country of residence, including Kenya, Zimbabwe, Tanzania, Uganda, and countries in the EEA.

Where data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognised transfer mechanisms.

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
• Restriction — request that we limit processing of your data in certain circumstances.
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — unsubscribe from communications at any time via the link in any email we send.

To exercise any of these rights, contact us at info@fklmafrica.org. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Our website uses the following categories of cookies:

• Strictly necessary — essential for website operation (session management, security). These cannot be disabled.
• Analytics — anonymised data to understand how visitors use our site. You may opt out via your browser settings or our cookie banner.

We do not use advertising, tracking, or social media cookies. Third-party embeds (e.g. video content) may set their own cookies; these are governed by the respective provider's privacy policy.

We retain personal data only for as long as necessary:

• Newsletter subscribers: until unsubscription, plus 30 days for processing.
• Donation records: 7 years for financial and legal compliance purposes.
• Volunteer and application data: 2 years from the close of the relevant application process.
• Contact form submissions: 12 months unless an ongoing relationship is established.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we encourage users to use strong passwords and exercise caution when sharing sensitive information online.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will notify newsletter subscribers by email. Continued use of our website after changes take effect constitutes acceptance of the updated policy.

For privacy-related enquiries, data subject requests, or concerns:
Email: info@fklmafrica.org
Post: Data Protection, FKLM Africa Foundation, Nairobi, Kenya