Privacy Policy

Effective Date: 1/07/2026
Last Updated: 30/06/2026

1. Introduction

Kakuma Blogging ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Services").

This Policy is issued in compliance with the Data Protection Act, 2019 of Kenya and reflects international best practices, including the General Data Protection Regulation (GDPR) where applicable.

By using our Services, you consent to the collection and use of your information as described in this Privacy Policy.

2. Who We Are

Kakuma Blogging is a refugee-led digital platform operating in Kakuma Refugee Camp, Turkana County, Kenya. We act as a Data Controller in relation to the personal data processed through our platform.

Contact Information:

Email: info@kakumablogging.co.ke
Phone: 0792371978
Address: Kakuma Refugee Camp, Turkana County, Kenya

3. What Personal Data We Collect

We collect personal data that is adequate, relevant, and limited to what is necessary for our specified purposes.

3.1 Information You Provide Directly

Category	Examples
Registration Information	Full name, username, email address, phone number, password
Profile Information	Profile picture, bio, skills, interests, location (camp section/block)
Content	Blog posts, comments, stories, photos, videos, audio recordings
Communication	Messages, feedback, support requests, survey responses

3.2 Information Collected Automatically

Category	Examples
Device Information	IP address, browser type, device type, operating system
Usage Data	Pages visited, time spent, features used, interaction patterns
Location Data	Approximate location based on IP address

3.3 Sensitive Personal Data

We may collect sensitive personal data, such as information revealing your ethnic origin, health status, or religious beliefs, only when you voluntarily provide it. We treat such data with additional protection.

4. How We Collect Personal Data

We collect personal data in the following ways:

Directly from you – When you register, update your profile, post content, or contact us
Automatically – Through cookies and analytics when you use our platform
From third parties – When you use social login features (with your consent)

5. How We Use Your Personal Data

We process your personal data for the following purposes:

5.1 Service Delivery

To create and manage your account
To enable you to post, share, and interact with content
To connect you with job opportunities and services
To provide the features you request

5.2 Platform Improvement

To analyze how the platform is used
To improve functionality and user experience
To personalize content and recommendations

5.3 Communication

To send you updates, notifications, and responses
To provide support and address your inquiries
To send you marketing communications (with your consent)

5.4 Legal and Regulatory Compliance

To comply with the Data Protection Act, 2019 and other applicable laws
To protect the rights and safety of users and the community

5.5 Legitimate Interests

We process personal data based on legitimate interests pursued by us, except where such interests are overridden by your fundamental rights and freedoms. These legitimate interests include:

Operating and maintaining the platform
Ensuring platform security and preventing fraud
Understanding user needs to improve services

6. Legal Basis for Processing

Under the Data Protection Act, 2019, we process personal data on the following legal bases:

Basis	Application
Consent	When you give us clear consent to process your data for specific purposes
Contract	When processing is necessary for the performance of a contract with you
Legal Obligation	When processing is necessary to comply with the law
Vital Interests	When processing is necessary to protect someone's life
Legitimate Interests	When processing is necessary for our legitimate business interests

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy.

Data Type	Retention Period
Account Information	For as long as your account is active, plus 30 days after deletion
Content (Posts, Stories)	Until you delete it or request removal
Messages	Until both parties delete them or account closure
Usage Data	Up to 12 months for analytics purposes
Sensitive Data	Only as long as necessary for the purpose provided

We periodically review the data we hold and delete anything we no longer need.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

SSL/TLS encryption for data transmission
Secure password storage with hashing
Regular security audits and updates
Access controls limiting data access to authorized personnel
Data minimization principles

9. Sharing and Disclosure

We do not sell your personal data to third parties. We may share your data in the following circumstances:

9.1 With Your Consent

We may share your data when you give us explicit consent.

9.2 Service Providers

We may share data with trusted third-party service providers who assist us in operating the platform (e.g., hosting, analytics). These providers are contractually obligated to protect your data.

9.3 Legal Requirements

We may disclose your data if required by law or to protect the rights, property, or safety of Kakuma Blogging, our users, or others.

9.4 Third-Party Integrations

If you use social login or other third-party features, data may be shared with those services according to their privacy policies.

10. Data Transfers

We do not transfer personal data outside Kenya unless there is proof of adequate data protection safeguards or valid consent from the data subject.

11. Your Rights

Under the Data Protection Act, 2019, you have the following rights regarding your personal data:

Right	Description
Right to be Informed	To know what personal data we collect and how we use it
Right to Access	To request access to your personal data
Right to Rectification	To correct inaccurate or incomplete data
Right to Erasure	To request deletion of your data ("right to be forgotten")
Right to Restrict Processing	To limit how we use your data
Right to Data Portability	To receive your data in a structured, machine-readable format
Right to Object	To object to processing based on legitimate interests
Right to Withdraw Consent	To withdraw consent at any time

How to Exercise Your Rights

To exercise any of these rights, contact us atinfo@kakumablogging.co.ke. We will respond to your request within 7 days as required by law. Access requests are free of charge.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Enhance user experience
Analyze platform usage
Personalize content and ads

You can manage your cookie preferences through your browser settings. For more information, see our Cookie Policy.

13. Children's Privacy

Our platform is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware of such data, we will delete it promptly.

14. Links to Other Websites

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this Policy periodically.

16. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

📧 Email: info@kakumablogging.co.ke

📱 Phone: +254792371978
📍 Address: Kakuma Refugee Camp, Turkana County, Kenya

📋 Office of the Data Protection Commissioner (ODPC):

Website: www.odpc.go.ke[reference:29]
Email: info@odpc.go.ke
Phone: 0207801800

You have the right to lodge a complaint with the ODPC if you believe your data protection rights have been violated.