Data Policy

Data Management & Protection Policy

1. Our Data Philosophy

In the spirit of #HUMANIZE, we treat every piece of data as a person, not a number. We are committed to the ethical collection, secure storage, and transparent use of all data entrusted to the Enkare Oltau Foundation.

2. Data Collection Principles

We adhere to the following principles for all data (Volunteers, Donors, and Partners):

• Lawfulness & Fairness: Data is collected only with explicit consent (e.g., signing up for the VVOICE Newsletter).
• Purpose Limitation: Data collected for volunteering will not be used for unrelated marketing without permission.
• Data Minimization: We only ask for the information we absolutely need to fulfill our mission.

3. How We Store Your Data

• Cloud Security: We utilize encrypted cloud storage for our volunteer databases and the VVOICE community registries.
• Access Control: Access to sensitive donor and volunteer information is restricted to authorized Enkare Oltau administrators only.
• Retention: We only keep your data for as long as you are part of the Enkarean community. If you request a “Right to be Forgotten,” we will purge your records within 30 days.

4. Financial & Donation Data

The Foundation does not store sensitive financial credentials.

• M-Pesa/Paybill: Transactions are handled via secure mobile money gateways.
• PayPal/Online: Payments are processed through encrypted third-party portals. We only receive a confirmation of payment and your contact details for receipting.

5. Multimedia & The VVOICE Spotlight

As a youth-driven organization, we celebrate our community through photos and stories.

• Consent: We obtain verbal or written consent before featuring a volunteer’s “Hand-Drawn” portrait or story in the VVOICE Newsletter.
• Withdrawal: If you are featured and wish to have your media removed from our digital archives, we will honor that request immediately.

6. Data Breach Protocol

In the unlikely event of a data breach, the Enkare Oltau Foundation is committed to:

1. Notifying the affected individuals within 72 hours.
2. Reporting the incident to the Office of the Data Protection Commissioner (ODPC) Kenya as required by law.

7. Governance

This policy is reviewed annually to ensure we stay aligned with international best practices and local Kenyan law.

8. Contact Us

If you have any questions about our Data Policy or how we handle your data, please reach out to the Enkarean Team at: info@enkarefoundation.org