Privacy Policy

1. Introduction

Southern Youth Alliance ("SOYA," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.soyalliance.org or engage with our programs and services.

As a non-partisan, non-profit community-based organization operating in Ijara, Garissa County, Kenya, we take our responsibility to protect your personal data seriously and comply with applicable data protection laws in Kenya.

Please read this Privacy Policy carefully. By using our Website or services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Register for our programs or services
• Sign up for our newsletter or mailing list
• Make a donation or financial contribution
• Contact us through our website, email, or phone
• Submit feedback, testimonials, or comments
• Apply for volunteer positions or employment
• Participate in surveys or community engagement activities

This information may include:

• Name and contact information (email, phone number, address)
• Age, date of birth, and gender
• Educational background and employment information
• Payment and financial information (for donations)
• Any other information you choose to provide

2.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain information about your device and browsing activity, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website or source
• Date and time of visits
• Device type and screen resolution

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Website. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Understand how you use our Website
• Improve Website functionality and performance
• Analyze traffic and usage patterns

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Website.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Program Administration

• Process registrations and enrollments for our programs
• Communicate program updates and important information
• Evaluate program effectiveness and impact
• Coordinate volunteer and community activities

3.2 Communication

• Respond to your inquiries and requests
• Send newsletters, updates, and announcements
• Provide information about our programs and initiatives
• Send event invitations and program opportunities

3.3 Donations and Financial Transactions

• Process donations and issue receipts
• Maintain accurate financial records
• Comply with legal and regulatory requirements
• Report on fund utilization and organizational transparency

3.4 Website Improvement

• Analyze website usage and performance
• Identify and fix technical issues
• Improve user experience and functionality
• Develop new features and services

3.5 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent fraud
• Protect our rights and the rights of others
• Enforce our Terms of Service

4. How We Share Your Information

We respect your privacy and do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Website, conducting our programs, or servicing you, such as:

• Payment processors for donation handling
• Email service providers for communications
• Website hosting and technical support providers
• Data analytics providers

These service providers are contractually obligated to keep your information confidential and use it only for the purposes we specify.

4.2 Partner Organizations

We may share information with partner organizations when collaborating on programs or initiatives, but only with your consent or when necessary for program delivery.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government or regulatory inquiries
• Law enforcement requests
• Protection of our legal rights or the safety of others

4.4 Organizational Changes

In the event of a merger, acquisition, or transfer of assets, your information may be transferred to the acquiring organization, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for data transmission
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection practices
• Secure backup and recovery systems

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

• Program participant records: Duration of program participation plus 3 years
• Donation records: 7 years for financial and tax compliance
• Marketing communications: Until you unsubscribe or opt out
• Website analytics data: Up to 2 years

When information is no longer needed, we securely delete or anonymize it.

7. Your Rights and Choices

You have certain rights regarding your personal information:

7.1 Access and Correction

You have the right to access and update your personal information. You can contact us to request a copy of the information we hold about you or to correct any inaccuracies.

7.2 Deletion

You can request that we delete your personal information, subject to certain legal exceptions (such as financial records required for compliance).

7.3 Marketing Communications

You can opt out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Contacting us directly at info@soyalliance.org
• Updating your communication preferences in your account settings

7.4 Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

7.5 Data Portability

Where applicable, you have the right to receive a copy of your personal information in a structured, commonly used format.

8. Children's Privacy

Our Website is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13 without parental consent.

For youth programs serving participants under 18, we obtain appropriate parental or guardian consent before collecting personal information. If you believe we have inadvertently collected information from a child under 13 without proper consent, please contact us immediately.

9. Third-Party Websites and Services

Our Website may contain links to third-party websites or services that are not operated by SOYA. This Privacy Policy does not apply to those third-party sites.

We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

10. International Data Transfers

SOYA is based in Kenya, and your information is primarily stored and processed in Kenya. Some of our service providers may be located outside Kenya.

When we transfer information outside Kenya, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

We will notify you of any material changes by:

• Posting the updated policy on our Website
• Updating the "Last Updated" date
• Sending email notifications for significant changes (if you have subscribed)

We encourage you to review this Privacy Policy periodically. Your continued use of our Website after changes are posted constitutes your acceptance of the updated policy.

12. Complaints and Data Protection Authority

If you have concerns about how we handle your personal information, please contact us first so we can address your concerns.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner in Kenya if you believe we have violated your data protection rights.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Your Consent

By using our Website or services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our Website or services.

15. Our Commitment to Transparency

As a non-profit organization, SOYA is committed to transparency and accountability in all our operations, including how we handle personal data.

We believe in open communication with our community and welcome any questions or concerns you may have about your privacy and our data practices.