Privacy Policy
Last updated: July 2026
Data Controller
The Skateboarding Society of Kenya (SSK) is the data controller for personal information collected through our platform. Contact us at privacy@skateboardingkenya.org or Skateboarding Society of Kenya, Nairobi, Kenya.
Information We Collect
We collect information you provide directly: name, email address, phone number, postal address, county, and donation amount. When you make a payment, Paystack processes your payment details — SSK does not receive or store credit card numbers or bank account details. We also collect technical information automatically: IP address, browser type, device information, and usage data through cookies and analytics.
How We Use Your Information
We use your information to process donations and issue receipts, communicate about campaigns and programs, improve our platform and services, comply with legal and regulatory obligations, and prevent fraud or misuse. We do not sell your personal data to third parties.
Legal Basis (Kenya Data Protection Act, 2019)
We process personal data on the following grounds: consent (you agree when registering or donating), contract (processing is necessary to complete your donation), legal obligation (financial records must be retained under Kenyan law), and legitimate interests (improving services, fraud prevention).
Third-Party Services
We share data with trusted third parties who help us operate: Paystack (payment processing), Brevo (email communications), and Cloudflare R2 (image storage). Each third party has its own privacy policy governing how they handle your data. We ensure that all third parties we work with are compliant with applicable data protection laws.
Data Retention
We retain financial records (donations, receipts) for 7 years as required by Kenyan law. Account data is retained until you request deletion or your account is terminated. Campaign and donation records may be retained indefinitely in aggregate or anonymized form for historical and statistical purposes.
Your Rights
Under the Kenya Data Protection Act 2019, you have the right to: access your personal data, correct inaccurate data, request deletion of your data (subject to legal retention requirements), withdraw consent at any time, and object to processing for specific purposes. To exercise these rights, contact us at privacy@skateboardingkenya.org.
Cookies
We use essential cookies for authentication and platform functionality. Analytics cookies help us understand how the platform is used. You can control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.
Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
International Data Transfers
Your data may be processed outside Kenya by our third-party service providers (Paystack operates in Nigeria and globally; Brevo is based in France; Cloudflare operates globally). We ensure adequate safeguards are in place through contractual agreements and verification of compliance with applicable data protection standards.
Data Protection Officer
SSK has appointed a Data Protection Officer (DPO) who can be contacted at dpo@skateboardingkenya.org for any questions or concerns about how your personal data is handled.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. The "Last updated" date at the top of this page reflects the most recent revision.