Data Protection & Privacy Policy

Haki Zako collects limited personal information to provide human rights information and education, coordinate outreach, respond to support requests, and manage partnerships responsibly. This policy explains how we handle personal information and our commitment to protecting privacy in accordance with Kenya's Data Protection Act 2019.

Haki Zako processes personal data on the basis of consent and legitimate interests connected to our human rights education and community support mission. Where we collect information, we aim to be clear about why we are collecting it and how it will be used.

We may collect names, contact details, organizational affiliations, professional details, and brief descriptions of issues shared voluntarily through our website, forms, events, or direct communication. We collect only what is necessary to respond to requests, coordinate activities, and improve our work.

Individuals are encouraged not to share highly sensitive personal information through public or unsecured channels unless necessary.

Information shared with Haki Zako is used only for purposes connected to our mission including responding to requests, coordinating community sessions, linking individuals to appropriate services, managing the Haki Zako Network, and communicating about our activities.

We do not sell personal data or use it for commercial purposes. Information will not be shared publicly without consent unless required by law or necessary to prevent serious harm.

Queries submitted through Haki Digital (bot.hakizako.org) are processed to generate rights information responses. Users are not required to identify themselves. Aggregated and anonymized query data may be used to improve the platform and inform public advocacy. Individual queries are not shared publicly or disclosed to third parties.

Haki Zako uses third party platforms including Google, WhatsApp, and social media tools to collect and communicate information. These platforms operate under their own privacy policies. We encourage individuals to review those policies when engaging with us through those channels. We aim to use reputable platforms and handle all information responsibly.

Our website may use cookies and standard analytics tools to understand how visitors engage with our content. No personally identifying information is collected through website analytics. Visitors may adjust their browser settings to manage cookie preferences.

We take reasonable steps to store information securely using password-protected systems and reputable digital platforms. Access is limited to those who require it for operational purposes. We acknowledge that digital communication carries inherent risks and encourage individuals to consider this when sharing information electronically.

Information is retained only for as long as necessary to respond to requests or meet operational and legal requirements. Information is deleted or anonymized when no longer needed.

Under Kenya's Data Protection Act 2019, individuals have the right to:

• Access personal information held about them
• Request correction of inaccurate information
• Request deletion of their information where appropriate
• Withdraw consent for processing at any time

Requests may be directed to info@hakizako.org and will be responded to within 14 working days.

Concerns about misuse of information or privacy breaches may be reported to complaints@hakizako.org and will be handled promptly and confidentially. Where a concern constitutes a data breach, Haki Zako will take immediate steps to assess and address the breach in line with the Data Protection Act 2019.

This policy will be reviewed annually. The current version is always available at www.hakizako.org.