Last updated: 4 June 2026
Sonetarc Foundation (“we”, “us”, “our”) is committed to protecting the privacy and personal data of every individual and community we work with. This Privacy Policy explains how we collect, use, store, share and safeguard personal, geospatial and community data. It is issued in compliance with the Kenya Data Protection Act, 2019 and the EU General Data Protection Regulation (GDPR), and reflects our obligations as a technology-driven, community-centred foundation.
1. Who We Are (Data Controller)
Sonetarc Foundation is the data controller responsible for personal data processed through this website and our field programmes. You can reach our data protection contact at:
- Sonetarc Foundation
- Applewood Adams Plaza, 10th Floor, Ngong Road, Nairobi, Kenya
- Email: info@sonetarcfoundation.org
2. The Data We Collect
Because our work combines digital dashboards, research and community data collection, we may process the following categories of data:
- Website & contact data: name, email address, phone number, organisation and any message you submit through our contact or partnership forms.
- Field & programme data: community baseline information, household and demographic data collected with consent during programme monitoring and evaluation.
- Geospatial & UAV data: aerial imagery, mapping data and remote-sensing outputs generated through our drone and GIS operations.
- Technical data: IP address, browser type and cookie data used to operate and secure the website.
3. How and Why We Use Your Data
We process personal and community data only for legitimate, clearly defined purposes, including: responding to enquiries and partnership requests; planning, delivering, monitoring and evaluating our programmes; producing anonymised research, dashboards and impact reporting for donors and partners; and meeting legal and donor accountability obligations. We rely on your consent, our legitimate interests as a development organisation, and applicable legal obligations as the lawful bases for processing.
4. Consent and Community Data
When collecting community baseline data, we obtain informed consent from participants, explain how their data will be used, and give special protection to vulnerable groups including women, children and marginalised communities. Data used for public reporting, dashboards and research is aggregated and anonymised so that individuals cannot be identified.
5. Data Security
We apply appropriate technical and organisational safeguards to protect your information. Our field data, geospatial data and community demographics are encrypted in transit and at rest, access-controlled, securely stored and protected against unauthorised access, loss or data breaches. Access is restricted to authorised personnel on a need-to-know basis, and we maintain procedures to detect, report and respond to any data breach in line with the Kenya Data Protection Act, 2019 and GDPR.
6. Data Sharing and Cross-Border Transfers
We do not sell personal data. We may share limited data with trusted partners, donors, county governments and service providers strictly where necessary to deliver our programmes and meet reporting obligations, subject to confidentiality and data-protection commitments. Where data is transferred outside Kenya or the EU, we ensure adequate safeguards consistent with the Kenya Data Protection Act, 2019 and GDPR are in place.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to satisfy donor and legal requirements, or until consent is withdrawn, after which it is securely deleted or fully anonymised.
8. Your Rights
Under the Kenya Data Protection Act, 2019 and GDPR you have the right to access your personal data; to request correction of inaccurate data; to request deletion (“right to be forgotten”); to object to or restrict processing; to withdraw consent at any time; and to data portability. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or your local supervisory authority.
9. Cookies
Our website uses cookies to operate essential functions, remember your preferences and understand how the site is used. You can control or disable cookies through your browser settings; disabling some cookies may affect site functionality.
10. Contact Us
For any question about this Privacy Policy, or to exercise your data-protection rights, contact us at info@sonetarcfoundation.org or write to Sonetarc Foundation, Applewood Adams Plaza, 10th Floor, Ngong Road, Nairobi, Kenya.