Privacy Policy

To advance our conservation mission, we collect the following personal information:

• Contact Information: Name, email, postal address, and phone number provided during newsletter subscriptions, donations, event registrations, or volunteering.
• Payment Information: Credit card or other payment details for donations or purchases, processed securely by third-party providers (e.g., PayPal, M-Pesa) and not stored by us.
• Engagement Information: Data from surveys, advocacy campaigns, event registrations, or participation in memberships or volunteer programs.
• Online Interaction Data: IP address, browser type, device information, and website usage data collected via cookies or analytics tools (e.g., Google Analytics).
• Social Media Information: Profile details shared when engaging with us on platforms like X, Facebook, or Instagram.

We collect information through:

• Direct Interactions: Forms you complete, donations, registrations, or communications via email, phone, or in-person.
• Automated Technologies: Cookies, web beacons, and analytics tools to enhance website functionality and user experience.
• Third-Party Sources: Trusted partners like payment processors or analytics providers who verify or support our services.

Your information fuels our conservation efforts by enabling:

• Program Delivery: Processing donations, managing registrations, and fulfilling orders.
• Communication: Sending newsletters, updates, advocacy alerts, or responding to inquiries.
• Personalization: Tailoring content like conservation updates to your interests.
• Improvement: Analyzing usage and feedback to enhance our services.
• Compliance: Meeting legal obligations, such as tax reporting or adherence to Kenya’s Data Protection Act, 2019.
• Security: Protecting against fraud or unauthorized access.

We do not sell, rent, or trade your information. We may share it in these cases:

• Service Providers: With trusted vendors (e.g., PayPal, Mailchimp) bound by contracts to protect your data.
• Legal Obligations: When required by law, such as court orders or regulatory requests.
• Organizational Changes: During mergers or restructurings, data may be transferred as assets.
• Anonymized Data: Non-identifiable data may be shared for research or promotion.

We use cookies and similar technologies to enhance your experience, analyze traffic, and personalize content. Manage preferences via your browser or our Cookie Policy.

Under laws like Kenya’s Data Protection Act, 2019, GDPR, and CCPA, you may have rights to:

• Access: Request your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request data deletion, subject to legal exceptions.
• Opt-Out: Unsubscribe from marketing via email links or contact.
• Portability: Obtain data in a machine-readable format.
• Restrict Processing: Limit data processing where applicable.
• Object: Object to processing for specific purposes, such as marketing.

Contact us at ambururuwaterfall@gmail.com to exercise these rights. We respond within 30 days, as required by law.

We employ industry-standard measures, including encryption, secure servers, and access controls, to protect your data. However, no system is infallible, and we encourage secure communication channels.

As a Kenya-based organization, your data may be processed in countries with different privacy laws. We use safeguards like Standard Contractual Clauses to ensure global compliance.

We retain data only as necessary for outlined purposes or legal requirements (e.g., 7 years for tax records). Marketing preferences are kept until you opt out.

Our website may link to external sites (e.g., social media, payment platforms). We are not responsible for their privacy practices. Review their policies before sharing data.

Our services are not intended for individuals under 16. We do not knowingly collect children’s data and will delete it upon discovery.

In alignment with our conservation mission, we minimize our digital footprint by using energy-efficient servers, limiting data storage, and promoting paperless interactions.

We may update this policy to reflect legal or operational changes. Significant updates will be communicated via our website or email. The "Last Updated" date indicates the latest version.