1. Who we are
Dunia Endelevu (“we”, “us”, “our”) is a youth-led social enterprise and incubator based in Nairobi, Kenya. We help children write and publish climate stories, speak on our podcast and take part in environmental events. We are responsible for the personal information collected through this website and our programmes.
Questions about this policy go to hello@duniaendelevu.org, with “Privacy” in the subject line.
2. The law we follow
We handle personal information in line with Kenya’s Data Protection Act, 2019, the Data Protection (General) Regulations, 2021, and guidance from the Office of the Data Protection Commissioner (ODPC). We also follow the principle in Kenya’s Children Act that a child’s best interests come first.
3. Children’s information
Everyone in our programme is under 18, so the law treats them as a child. That shapes everything we do:
- We only collect a child’s information with the consent of their parent or legal guardian, as Section 33 of the Data Protection Act requires.
- Applications must be made by a parent or guardian, not by the child. Children should not fill in forms on this website.
- Before a child’s first session, we check that the person giving consent is the child’s parent or guardian, using a signed consent form.
- We collect only what we need to run the programme safely, and nothing more.
- We never use children’s information for advertising, marketing or profiling.
- A parent or guardian can withdraw consent at any time, as easily as they gave it.
4. What we collect
| Where it comes from | What we collect |
|---|---|
| Programme application | The child’s full name, age, school and track of interest. The parent or guardian’s full name, relationship to the child, phone number and email. Anything else you choose to tell us, such as access needs. |
| Taking part | Signed consent forms, attendance, emergency contacts, and the work children create: stories, illustrations, recordings and speeches. |
| Partner and contact enquiries | Your name, organisation, email, phone number if you give it, and your message. |
| Donations | Your name, email, phone number and organisation if you give them, what you would like to fund, the amount, how you would like to pay, and whether you want to be thanked by name or stay anonymous. |
| Volunteer applications | Your name, email, phone number, how you would like to help and anything you tell us about yourself. Volunteers must be 18 or over. |
| Visiting the website | Basic technical records kept by our website host, such as IP address, browser type and the pages requested, used to keep the site running and secure. We also count visits with Vercel Web Analytics, which uses no cookies and does not identify you. |
5. How we use it, and why
- To process applications and run the programme, including sessions, recordings, launches and events. Basis: the consent of the parent or guardian.
- To keep children safe, including emergency contacts and safeguarding records. Basis: our legal obligations and the child’s vital interests.
- To publish children’s work, only as described in section 6. Basis: separate written consent for each use.
- To reply to enquiries and manage partnerships, sponsorships and orders. Basis: our legitimate interests, or a contract with you.
- To arrange your donation, confirm it and thank you. Basis: our legitimate interests, or a contract with you.
- To consider volunteer applications, including the checks we make before anyone works with children. Basis: your consent and our legal obligations.
- To keep accounts and meet legal duties, such as financial and tax records. Basis: legal obligation.
6. Publishing children’s work
Children’s stories, recordings and speeches are at the heart of what we do. When we share them:
- We ask the parent or guardian for written permission for each use, for example a book, a podcast episode or a photo on this website.
- We credit children by first name and age only, unless the parent asks for something different in writing.
- We never publish a child’s contact details, home area or school together with their full name.
- If consent is withdrawn, we remove the work from our website and future editions as soon as we reasonably can. We cannot recall printed copies already sold or episodes already downloaded.
8. Storage outside Kenya
Some of our service providers store information on servers outside Kenya. When that happens, we only use providers that protect personal information to the standard the Data Protection Act requires, and we put the safeguards the Act requires in place.
9. How long we keep it
- Applications that don’t go ahead: deleted within 12 months.
- Programme records: kept while the child takes part and for two years afterwards, then deleted or anonymised.
- Consent forms: kept for as long as the work they cover is published, so we can show permission was given.
- Volunteer applications that don’t go ahead: deleted within 12 months.
- Financial records: as long as Kenyan tax law requires.
10. Keeping it safe
Only team members who need children’s information can see it. We use strong passwords and two-step sign-in, keep paper consent forms locked away, and train volunteers on data protection and safeguarding. If a data breach is likely to put anyone at risk, we will tell the Data Commissioner within 72 hours of becoming aware of it, and tell the people affected, as the law requires.
11. Your rights
Under the Data Protection Act you have the right to:
- be told how your information is used
- see the information we hold about you
- object to us using it
- have false or misleading information corrected or deleted
- withdraw your consent at any time
- receive your information in a format you can take elsewhere
Parents and guardians exercise these rights for their children. To make a request, email hello@duniaendelevu.org. We will confirm who you are, and your relationship to the child, before we act, and reply within the time limits set by the Data Protection (General) Regulations, 2021.
13. Complaints
If you are unhappy with how we have handled personal information, please tell us first so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner at www.odpc.go.ke.
14. Changes to this policy
We may update this policy as our programme grows. We will change the date at the top of this page, and tell families directly about any change that affects how we use children’s information.