Last updated: 4 October 2026
WECY Organization ("WECY", "we", "us" or "our") is committed to protecting the privacy and personal data of everyone who visits our website, contacts us, donates, volunteers or takes part in our programmes. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over it.
By using our website at wecyorganization.org or providing your information to us, you agree to this Privacy Policy. If you do not agree with it, please do not use the website or provide us with your personal information.
1. Who We Are
WECY Organization is a community-based, not-for-profit organization registered in Kenya and based in Nairobi. We work to restore dignity to every soul through inclusive health and affordable therapy, inclusive education and assistive devices, women and youth livelihoods, disability-inclusive climate action, and rights and advocacy.
For the purposes of the Kenya Data Protection Act, 2019 (and the EU General Data Protection Regulation where it applies), WECY Organization is the data controller responsible for your personal data.
2. Information We Collect
We collect information in two ways: information you give us, and information collected automatically.
Information you provide
- Identity and contact details — your name, email address, phone number and location when you contact us, subscribe to updates, register for an event, volunteer or partner with us.
- Donation details — the amount, date and purpose of your donation, and any message you send us. Payments are processed by our payment partners; we do not store full card numbers on our servers.
- Event and volunteer information — details you submit when you join an event or apply to volunteer, including attendance numbers, accessibility needs and any message you provide.
- Communications — the content of messages you send through our contact forms, email or social media.
Information collected automatically
- Technical data — IP address, browser type and version, device type, operating system and screen size.
- Usage data — the pages you visit, the time and date of your visit, time spent on pages and other diagnostic data.
- Cookies and similar technologies — small files used to keep the website working, remember your preferences and understand how the site is used (see section 5).
3. How We Use Your Information
We use your personal information to:
- respond to your enquiries and provide the information or support you request;
- process and acknowledge donations and issue receipts;
- manage event registrations, volunteer applications and partnerships;
- send you updates, newsletters and fundraising communications where you have asked to receive them;
- improve our website, services and programmes;
- keep our website secure, prevent fraud and misuse, and meet our legal and accounting obligations.
We will only send you marketing or fundraising communications where you have given your consent or where we have another lawful basis, and you can opt out at any time.
4. Legal Bases for Processing
We process personal data on one or more of the following lawful bases:
- Consent — where you have clearly agreed, for example to receive our newsletter.
- Performance of a contract — where we need to process your information to provide a service you have requested.
- Legitimate interests — to run and improve our organization, provided your rights are not overridden.
- Legal obligation — to comply with applicable laws such as tax and accounting rules.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies to operate the site, remember your choices and understand how visitors use our pages. You can control or delete cookies through your browser settings. Disabling some cookies may affect how the website works.
6. Donations and Payment Information
When you make a donation, you may be asked to provide your name, email address, phone number and payment details. Payments are handled by trusted third-party payment providers who process your data under their own privacy policies. We receive confirmation of your donation and the details needed to thank you and issue a receipt, but we do not store your full payment card data on our servers.
7. Sharing and Disclosure
We do not sell or rent your personal data. We may share your information with:
- Service providers — trusted partners who help us run the website, process donations, send emails or host data, acting only on our instructions.
- Professional advisers — auditors, lawyers and accountants where necessary.
- Authorities — where we are required to do so by law, or to protect the rights, safety and property of WECY, our beneficiaries or others.
Where we work with partners on a programme, we only share the minimum information necessary and require them to protect it.
8. International Data Transfers
Some of our service providers may store or process data outside Kenya. Where this happens, we take reasonable steps to ensure your data receives an adequate level of protection, including using appropriate safeguards and contractual protections.
9. Data Retention
We keep personal data only for as long as is necessary for the purposes described in this policy, or as required by law. Donation and financial records are typically kept for the period required by Kenyan tax and accounting rules. When data is no longer needed, we securely delete or anonymise it.
10. Data Security
We take appropriate technical and organizational measures to protect your personal data against loss, misuse and unauthorized access. These include secure connections, access controls and staff confidentiality. No method of transmission over the internet is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security.
11. Your Rights
Subject to applicable law, you have the right to:
- be informed about how we use your data;
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your data where there is no good reason for us to keep it;
- object to or restrict certain processing, including direct marketing;
- withdraw your consent at any time, without affecting processing carried out before you withdrew it;
- request a copy of your data in a portable format; and
- lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya or your local supervisory authority.
To exercise any of these rights, contact us using the details in section 15. We may need to verify your identity before acting on your request.
12. Children's Privacy
Our website and services are not directed at children under 18, and we do not knowingly collect personal data from children except where it is provided by a parent, guardian or authorised caregiver for the purpose of accessing our services. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will take steps to remove it.
13. Third-Party Links
Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies before providing any personal information.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
15. How to Contact Us
If you have any questions, requests or concerns about this Privacy Policy or your personal data, please contact us:
- WECY Organization, Nairobi, Kenya
- Email: info@wecyorganization.org
- Phone: +254 721 285 961