Privacy statement
Draft, October 2026
Who we are
Ndinda Foundation is responsible for processing personal data through this website. You can send privacy questions through the contact page.
What data we process
Contact form: your name, email address and whatever you write, to answer your question.
Newsletter: your email address and language preference, to send quarterly updates. You can unsubscribe at any time.
Donations: your name, email address or phone number and the amount, to process and acknowledge your gift. Payment details are processed by Stripe, Paystack and M-Pesa (Safaricom); we never see full card details.
Where your data is stored
Our database runs on Convex in the European Union. The website is hosted by Vercel. We never sell or share your data for marketing.
Cookies and videos
We don't set tracking cookies. YouTube videos only load when you press play, through the privacy-enhanced youtube-nocookie.com.
One functional cookie (ndinda_country) remembers only your country code for 30 days, derived by our hosting provider, so the donation form can suggest the right payment method (iDEAL | Wero in the Netherlands, M-Pesa in Kenya). We don't store your IP address.
Retention and your rights
We keep data no longer than necessary. Donation records are kept for as long as accounting law requires.
You have the right to access, correct or delete your data, and to object. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
