Privacy Policy
FLAIR First Ladies of Africa Impact - Impact and Resilience- Kenya Chapter below referred to as FLAIRKE Last Updated: April 2026
1. Introduction
FLAIRKE is committed to protecting the privacy and personal data of all individuals who interact with our website and services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Kenya Data Protection Act No. 24 of 2019 (DPA) and its subsidiary regulations.
By using our website, purchasing event tickets, or making a donation, you agree to the practices described in this Privacy Policy.
2. Who We Are
FLAIR First Ladies of Africa Impact - Impact and Resilience- Kenya Chapter
Represented by Sharon Onono Omeme
P.O. Box 30197-00100
office@nflair.ngo
flair.ngo
For any data protection enquiries, please contact us at the email address above.
3. Personal Data We Collect
We collect the following personal data depending on how you interact with our website:
3.1 Contact Form
- Full name
- Email address
- Phone number (if provided)
- Message content
3.2 Event Ticket Purchases
- Full name
- Email address
- Phone number
- Payment information (processed securely by our payment provider; we do not store card details)
- Ticket order details
3.3 Donations
- Full name
- Email address
- Donation amount and transaction reference
- Payment information (processed securely by our payment provider)
3.4 Website Usage (Cookies)
- IP address
- Browser type and version
- Pages visited and time spent
- Referring website
- Cookie identifiers (subject to your consent; see Section 9)
4. Lawful Basis for Processing
Under Section 30 of the Kenya Data Protection Act 2019, we process your personal data on the following lawful bases:
| Processing Activity | Lawful Basis |
|---|---|
| Responding to contact form enquiries | Consent (Article 30(a) DPA) |
| Processing event ticket purchases | Performance of a contract (Article 30(b) DPA) |
| Processing donations | Consent and legitimate interest (Article 30(a) & (f) DPA) |
| Website analytics (cookies) | Consent (Article 30(a) DPA) |
| Sending organisational updates (if subscribed) | Consent (Article 30(a) DPA) |
5. How We Use Your Personal Data
We use your personal data strictly for the purposes for which it was collected:
- To respond to your enquiries submitted via the contact form
- To process and confirm your event ticket purchases and send booking confirmations
- To process donations and issue receipts or acknowledgements
- To send you updates about our events and activities (only with your explicit consent)
- To improve our website and user experience through anonymised analytics
- To comply with our legal obligations under Kenyan law
We will not use your personal data for any purpose incompatible with the above without first obtaining your explicit consent.
6. Sharing of Personal Data
We do not sell, rent, or trade your personal data to third parties.
We may share your personal data with trusted third-party service providers who assist us in operating our website and services, including:
- Squarespace Inc. (website hosting and form management) — servers located in the United States
- Payment processors (for ticket and donation transactions)
- Email service providers (for sending booking confirmations and receipts)
All third-party processors are contractually required to handle your data securely and in accordance with applicable data protection laws.
International Data Transfers
Our website is hosted by Squarespace Inc., a company based in the United States. As a result, your personal data may be transferred to and stored on servers outside Kenya. Such transfers are made with appropriate safeguards in place, including Standard Contractual Clauses, in compliance with Section 48 of the Kenya Data Protection Act 2019.
By using our website, you acknowledge this transfer and the safeguards applied.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
| Data Category | Retention Period |
|---|---|
| Contact form submissions | 12 months |
| Event ticket purchase records | 5 years (for financial record-keeping) |
| Donation records | 5 years (for financial record-keeping) |
| Website analytics data | 12 months |
After the applicable retention period, your data will be securely deleted or anonymised.
8. Your Rights Under the Kenya Data Protection Act 2019
Under the DPA, you have the following rights regarding your personal data:
Right to be Informed — You have the right to know how your personal data is being used, which this Privacy Policy fulfils.
Right of Access — You may request a copy of the personal data we hold about you.
Right to Rectification — You may request that we correct any inaccurate or incomplete personal data.
Right to Erasure — You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw your consent.
Right to Restriction of Processing — You may request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability — You may request that we provide your personal data in a structured, commonly used format.
Right to Object — You have the right to object to the processing of your personal data, including for direct marketing purposes.
To exercise any of these rights, please contact us at [contact@ngoname.org]. We will respond to your request within 21 days as required by the DPA.
9. Cookies
Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device to help us provide a better user experience.
We use the following types of cookies:
- Strictly Necessary Cookies — Required for the website to function. These cannot be disabled.
- Analytics Cookies — Help us understand how visitors use our website (e.g., pages visited, time on site). These are only activated with your consent.
- Functional Cookies — Remember your preferences to personalise your experience.
When you first visit our website, you will be presented with a cookie consent banner. You may accept or decline non-essential cookies at that time. You can also change your cookie preferences at any time via the cookie settings link in the footer of our website.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:
- Secure HTTPS encryption for all data transmitted to and from our website
- Access controls limiting who can view personal data
- Regular review of our data protection practices
However, no method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner (ODPC) within 72 hours of becoming aware, as required by Section 43 of the DPA.
11. Children's Privacy
Our website is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data without parental consent, please contact us and we will take steps to delete such information.
12. Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The updated version will be posted on this page with the revised date at the top. We encourage you to review this policy periodically.
14. How to Lodge a Complaint
If you have concerns about how we handle your personal data and are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC):
Office of the Data Protection Commissioner
Website: www.odpc.go.ke
Email: info@odpc.go.ke
Telephone: +254 20 221 3000
This Privacy Policy was prepared in compliance with the Kenya Data Protection Act No. 24 of 2019 and the Data Protection (General) Regulations, 2021.