What Are You Trusting Us With?
When someone shares their name, their story or a photograph with us, they are trusting us with something that belongs to them.
In many communities, trust is built slowly and lost quickly. A story repeated without permission, a photograph shared without asking, or a list of names passed on carelessly can harm relationships that took years to build.
This policy explains how The Ubuntu Covenant cares for personal information: with dignity, honesty and stewardship.
Last updated: 30 October 2026
Who We Are
The Ubuntu Covenant is a Kenyan Public Benefit Organization, registered on 6 July 2026 under Section 10 of the Public Benefit Organizations Act (Registration No. PBO/2026/NL-6VUL7WB). Under Kenya’s Data Protection Act, 2019, we are the data controller for the information described here.
- Privacy contact: Brian N. Munywoki, Founding Steward
- Email: info@theubuntucovenant.org (subject line: “Privacy”)
- Phone: +254 117 229 366
- Post: P.O. Box 5585-00200, Nairobi, Kenya
Our Commitments
What does it mean to care for something that belongs to someone else?
The five Human Foundations that guide our work also guide how we handle your information.
- Human Dignity & Belonging — We collect only what we need, never sell it, and never use a story or image in a way that diminishes anyone.
- Trust & Cooperation — We tell you plainly what we collect and why, before we collect it. No hidden tracking, no surprises.
- Participation & Agency — You decide. We ask your permission, and you can withdraw it at any time.
- Responsible Leadership & Accountability — A named person is responsible for privacy, and we report serious breaches to the regulator and to those affected.
- Shared Responsibility & Stewardship — We keep your information safe, only as long as needed, and expect the same of anyone who handles it for us.
What We Collect and Why
How much do we really need to know in order to answer you well?
When you contact us through the website, by email or by phone, we receive your name, email address, phone number, organisation and message. We use them only to reply and continue the conversation, with your consent and in our legitimate interest of responding to you.
When you browse the website, WordPress.com records basic information such as the pages you visit, your device type and your approximate location. We use this to see which content helps people and to keep the site secure and working.
We do not ask for sensitive information, such as health, religion or ethnicity, unless a specific purpose requires it, and then only with your explicit consent.
Stories, Photographs and Recordings
A person’s story remains their own, even after they share it with us.
We do not yet record stories, photographs or audio in communities. Before we do, we will update this policy and publish our Safeguarding Policy, so everyone we work with knows how their story will be cared for.
How We Share and Protect It
Who else touches what you share with us, and how far does it travel?
We never sell or rent personal information. WordPress.com (Automattic) hosts our website and Google provides our email; they may use your information only to provide that service. The site also loads fonts from Google Fonts, which means your browser may contact Google when you visit.
Some of these providers store information on servers outside Kenya, including in the United States. We choose providers that commit to appropriate safeguards, as the Data Protection Act requires. We share with partners only with your agreement, and with authorities only where the law requires it or to protect someone from serious harm.
We keep enquiries and correspondence for 2 years after our last contact, then delete them or make them anonymous. Only people who need information for their work can see it, and our accounts use two-step verification. If a breach puts people at risk, we will report it to the Office of the Data Protection Commissioner and tell those affected promptly.
Our website uses cookies it needs to work, and WordPress.com statistics to count visits. You can block or delete cookies in your browser settings; the site will still work.
Your Rights
Whose information is it, really?
Under Kenya’s Data Protection Act, 2019, you have the right to:
- be told how your information is used;
- see the information we hold about you;
- correct information that is wrong or misleading;
- ask us to delete your information;
- object to how we use it, or withdraw your consent at any time;
- receive your information in a form you can take elsewhere.
To use any of these rights, email us with “Privacy request” in the subject line. There is no charge, and we will respond as quickly as we can, within the time the law allows.
If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner.
Children
This website is not designed for children, and we do not knowingly collect their personal information.
Changes to This Policy
We will update this policy as our work grows, and show the date of the latest version at the top of this page.