Data & Privacy Policy

Last updated: June 2026 · Sample policy for the prototype — to be reviewed against the Kenya Data Protection Act, 2019 before launch.

1. Who we are

Maahad Daawah Organisation (Nairobi, Kenya) is the data controller for personal information collected through this site. Contact us at info@maahad.org for any privacy matter.

2. What we collect

• Your name, phone number and email when you donate, order, subscribe or request support.
• Order and delivery details, including a delivery address where you choose delivery, and any names you provide for an Udhiya offered on behalf of others.
• Payment metadata (amount, reference, status). We do not collect or store full card numbers.
• Basic technical data needed to run and secure the site.

3. How we use it

• To process donations and orders, issue receipts, tag and fulfil Udhiya, and share slaughter and distribution proof.
• To send you transactional updates and, where you have opted in, news and appeals.
• To meet our legal, audit and reporting obligations as an NGO.

4. Payments

Payments are handled by Safaricom (M-Pesa) and Paystack. They process your payment under their own terms and privacy policies; we receive confirmation and a reference, not your card details.

5. Messages & consent

We send transactional messages (receipts, order and proof updates) as part of providing the service.

When you donate, order or subscribe, our forms include a pre-selected option to “Keep me updated with Maahad news, appeals & impact by email and SMS”. Leaving it ticked means you consent to receiving these promotional messages; you may untick it before submitting if you would rather not.

You can withdraw your consent at any time: use the unsubscribe link in the footer of any email, or reply STOP to any SMS, and we will stop sending you promotional messages. Transactional messages relating to your orders and donations will still be sent where needed.

6. Who we share with

We share data only with service providers who help us operate — payment processors, email/SMS providers, and our own delivery riders (who see the name, address and phone needed to deliver your order). We do not sell your data.

7. Retention

We keep personal and financial records for as long as needed to provide the service and to meet legal and audit requirements, then securely delete or anonymise them.

8. Your rights

Under the Kenya Data Protection Act, 2019 you may request access to, correction of, or deletion of your personal data, and object to certain processing. Email info@maahad.org and we will respond within a reasonable time.

9. Security & children

We use appropriate safeguards to protect your data. The site is not directed at children, and we do not knowingly collect their data without a guardian.

10. Changes

We may update this policy; the latest version always applies. For questions, contact info@maahad.org.