Privacy Policy

Overview of Data Protection


General Information

This overview outlines the types of personal information we collect, why we collect it, and how we handle your data when you visit or use the NACOFA website. Personal information includes any data that could personally identify you. Detailed information on data protection is provided in the sections below.


Data Collection on Our Website

Who is Responsible for Data Collection?

Data collected on this website is processed by the website operator:

National Alliance of Community Forest Associations (NACOFA)
P.O Box 12115-20100
Njoro, Nakuru - Kenya
Telephone: +254 722 451 966
Email: nationalalliancenacofa@gmail.com

How Do We Collect Your Data?

  1. Data You Provide: This includes data you enter into forms, such as contact forms.
  2. Automatic Data Collection: Our IT systems automatically collect technical data (e.g., browser type, operating system, and time of access) when you visit our website.

What Do We Use Your Data For?

Your Rights

You can contact us at any time using the contact information provided on this website for further questions about privacy and data protection.

Analytics and Third-Party Tools

When visiting our website, your browsing behavior may be analyzed using cookies and analytics tools. This data is encrypted or pseudonymized to prevent identification. You can object to this analysis or disable it by adjusting your browser settings. Details are provided below.



General Information and Mandatory Details

Data Protection

We take the protection of your personal data seriously and treat it confidentially in accordance with the Kenya Data Protection Act (2019) and this privacy policy. Note that data transmission over the internet (e.g., via email) may be vulnerable to security breaches, and complete protection is not guaranteed.


Responsible Party

The responsible party for data processing on this website is:

National Alliance of Community Forest Associations (NACOFA)
P.O Box 12115-20100
Njoro, Nakuru - Kenya
Telephone: +254 722 451 966
Email: nationalalliancenacofa@gmail.com

The responsible party determines the purposes and means of processing personal data.


Revocation of Consent

You can revoke your consent to data processing at any time with future effect by sending an informal email request. Data processed before revocation may still be legally processed.


Right to Data Portability

You have the right to request that data processed with your consent or for a contract be delivered to you or a third party in a machine-readable format, where technically feasible.




Secure Transactions

Encrypted Payments

If you enter payment details for a contract (e.g., credit card information), these are processed via encrypted SSL/TLS connections. An encrypted connection is indicated by "https://" in your browser’s address bar and a lock icon.

With encrypted communication, your payment details cannot be accessed by unauthorized parties.



Data Collection on Our Website

Cookies

Cookies help improve the usability and security of our website.

You can configure your browser to:

Disabling cookies may limit website functionality. Cookies necessary for essential website operations are stored based on legitimate interest in providing a functional and optimized service.


Server Log Files

We collect technical data through server log files, including:

These data are processed under legitimate interest and are not combined with other data sources.


Contact Form

If you submit inquiries via a contact form, we collect the information provided (e.g., your name and email address) to address your inquiry. This data is processed with your consent and retained until its purpose is fulfilled or consent is revoked.




Data Processing for Contracts

Customer and Contract Data

We process personal data necessary to establish or modify legal relationships (e.g., memberships, donations). Usage data is collected only as required for providing services or billing. Customer data is deleted upon order completion or contract termination, subject to legal retention periods.


Data Transmission for Contracts

Personal data is shared with third parties only as necessary to fulfill contracts, e.g., with delivery companies or payment processors. Data will not be shared for advertising purposes without your explicit consent.



Analytics and Advertising

Matomo (formerly Piwik)


This website uses Matomo for web analytics.

Newsletter

To subscribe to our newsletter, we collect your email address and verification of consent. Data is used solely for the newsletter and not shared with third parties. You can unsubscribe at any time via the link provided in each newsletter.


This policy ensures your data is handled with care and in compliance with the Kenya Data Protection Act (2019). For further questions, please contact us using the details provided above.