Privacy Policy

2.1. “Alliance Member / Partner Entity”: Any legally established organization, institution, or NGO that has formally joined or partnered with Graceworld Impact Alliance to execute joint humanitarian, development or advocacy programs.

2.2. “Joint Data Controllers”: Two or more Data Controllers who jointly determine the legal purposes and operational means of processing personal data within coalition projects, joint initiatives or shared databases.

2.3. “Personal Data”: Any information relating to an identified or identifiable natural person (“Data Subject”).

2.4. “Sensitive Personal Data”: Personal data revealing a natural person’s race, health status, ethnic social origin, conscience, belief, genetic data, biometric data, property details, marital status, family details including names of a person’s children, parents, spouse or spouses or sex life.

2.5. “Data Controller”: A natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purpose and means of processing personal data.

2.6. “Data Processor”: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Data Controller.

2.7. “Data Subject”: An identified or identifiable living individual who is the subject of personal data.

3.1. Lawfulness, Fairness and Transparency: Collected lawfully, fairly, and in a transparent manner.

3.2. Purpose Limitation: Collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes.

3.3. Data Minimization: Adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

3.4. Accuracy: Accurate and, where necessary, kept up to date.

3.5. Storage Limitation: Kept in a form which permits identification of data subjects for no longer than is necessary.

3.6. Integrity and Confidentiality: Processed using appropriate technical and organizational safeguards against unauthorized or unlawful processing, accidental loss, destruction or damage.

3.7. International Transfers: Transferred outside Kenya only where adequate data protection safeguards or consent exist.

4.1. Program Beneficiaries & Community Members

4.2. Donors, Grantors & Strategic Partners

4.3. Job Applicants, Volunteers & Staff

4.4. Website Visitors & Digital Interactions

5.1. Consent: Where you have given explicit, informed and unambiguous consent.

5.2. Performance of a Contract: Processing necessary data for executing or performing an agreement (including Alliance Membership Agreements, Joint Operating Agreements, grant agreements or employment contracts).

5.3. Legal Obligation: Compliance with statutory duties under the law.

5.4. Vital Interests: Protecting the vital interests or safety of data subjects or third parties during emergency relief, disaster response or humanitarian interventions.

5.5. Public Interest: Execution of humanitarian functions and community development carrying significant public benefit.

5.6. Legitimate Interests: Necessary for our legitimate interests (such as joint Alliance monitoring, cross-organizational impact evaluations, donor reporting, platform security and fraud prevention) where not overridden by your fundamental rights.

6.1. Sensitive Personal Data

6.2. Children’s Data (Protection of Minors)

7.1. Joint Program Implementation: Delivery of regional and community food security, educational bursaries, WASH initiatives, livelihoods training, and healthcare outreach across Alliance member operations.

7.2. Alliance Monitoring, Evaluation, Accountability and Learning (MEAL): Measuring aggregated coalition impact, auditing cross-partner operational efficacy and ensuring institutional accountability.

7.3. Donor & Statutory Reporting: Aggregating anonymized data for grant reporting, regulatory submissions to relevant supervisory bodies and internal audits.

7.4. Fundraising, Advocacy & Alliance Communications: Processing donations, issuing tax receipts, acknowledging support, coordinating coalition campaigns and sending updates (where consented to).

7.5. Human Resources, Volunteer Roster & Network Directory: Assessing recruitment applications, executing employment terms, managing payroll and maintaining the Alliance expert and volunteer rosters.

7.6. Regulatory Compliance & Dispute Resolution: Addressing legal claims, audits, fraud detection and regulatory obligations.

8.1. Data Sharing

8.2. Cross-Border Data Transfers

9.1. Security Measures

9.2. Data Retention

9.3. Your Rights as a Data Subject

11.1. Explicit Consent: Photos or videos identifying beneficiaries, especially children, vulnerable individuals or sensitive health settings, are taken and published only with signed/thumb-printed media consent forms.

11.2. Withdrawal: You retain the right to withdraw media consent at any point, after which GIA and its member entities will cease further publication of the relevant media across digital platforms.

12.1. Direct Marketing: We will only send you newsletters, alliance updates, event invitations or joint fundraising campaign notices if you have explicitly opted in. You can opt out at any time by clicking the "Unsubscribe" link in our emails.

12.2. Cookies Policy: Our website uses cookies to enhance browsing experience and analyze web traffic. You can manage your cookie preferences through your browser settings.

15.1. If you have questions, concerns or wish to lodge a complaint regarding GIA’s or any member entity’sprocessing of your personal data, please contact us first: -

15.2. If you are unsatisfied with our response, you retain the statutory right to lodge a complaint directly with the regulator: -