Privacy Policy

Pure Pearl Foundation is a non-governmental organisation registered in Kenya, with its office at The Pearl, Moyne Dr, Nyali, Mombasa, Kenya. We run education, enterprise and environmental programmes in Mombasa, Kilifi and Kwale counties.

For the purposes of the Data Protection Act, 2019, we are the data controller for the personal data described in this policy. Our data protection contact is the Programme Director, reachable at the address below.

Donors and supporters: name, email address, phone number, postal address where given, and a record of donations made. Card and mobile money details are handled by our payment provider and are not stored on our systems.

Programme participants: name, age, school or ward, guardian contact details, attendance and progress records, and, where a bursary is involved, documentation of household income. Photographs are taken only with written consent from the participant, or a guardian where the participant is a child.

Volunteers and applicants: contact details, references, and the outcome of safeguarding checks.

Website visitors: pages viewed and approximate location derived from IP address, collected in aggregate. We do not use advertising cookies.

To run the programmes a participant has joined, and to report to the funders of that programme in aggregate.

To process a donation, issue a receipt, and meet our tax and audit obligations.

To send programme updates to people who have asked for them. Every email we send carries an unsubscribe link.

To meet our safeguarding duties towards the children and young people we work with.

We do not sell personal data, and we do not share it with third parties for their own marketing.

We share limited data with our payment provider in order to take a donation, with our external auditor during the annual audit, and with county government offices where a programme is run jointly and the law or the partnership agreement requires it.

Funder reports contain aggregate figures. Where a funder asks for an individual story, we seek consent from the person concerned first and they are free to decline.

Donation records are kept for seven years, as required for tax and audit purposes. Programme records are kept for the length of a participant's involvement and for six years afterwards, so that alumni can request confirmation of their participation. Volunteer application records are kept for two years. Anything else is deleted once it is no longer needed.

Under the Data Protection Act, 2019, you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it where we have no continuing obligation to keep it, and withdraw consent for photographs or marketing at any time.

Write to us at the address below and we will respond within thirty days. If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner.

Most of our programme participants are under 18. We collect the minimum data needed to run a programme, we require guardian consent before enrolment, and our safeguarding policy governs who may access those records. Staff and volunteers are briefed on it before any placement involving children.

We review this policy once a year and whenever our programmes or systems change materially. The review date is shown at the top of this page.