Privacy policy

Last updated January 2026

This policy explains what personal information The Bridge of Hope Foundation collects, why we collect it, and what you can ask us to do with it. We are a non-profit organisation registered in Kenya, no. SCH/2026/001, and a registered Charitable Children's Institution, no. DCS/CCI/NRK/2026/042. We are based at Siyabei, off Narok-Nairobi Road, P.O. Box 15181 - 00400, Nairobi.

Who is responsible for your data

We are the data controller. Our data protection contact is The Bridge of Hope Foundation's administration team, reachable at bridgeofhopefoundationsupport@gmail.com.

What we collect

• If you donate: your name, email address, postal address if you give one, the amount and date of your gift, and a record of your communication preferences. Your card details are handled by our payment provider and never reach our servers.
• If you subscribe to updates: your name and email address.
• If you contact us: whatever you choose to put in your message.

Why we use it, and on what legal basis

We process your donation details to take the payment, send you a receipt and keep accurate financial records — this is necessary to perform our agreement with you and to meet our legal accounting obligations. We send you updates about our work on the basis of your consent, which you can withdraw at any time.

Who we share it with

Our payment providers: PayPal (for US dollar and pound sterling gifts) and Safaricom M-Pesa, via its Daraja platform (for Kenyan shilling gifts). We do not yet use a separate provider for sending emails. Our auditors see donation records as part of the annual audit. We are sometimes required to share financial information with Kenyan regulators. We do not sell, rent, swap or otherwise share your details with any other organisation, ever.

Your data may be stored on servers outside Kenya and outside the UK, because our providers are international. We only use providers that offer appropriate safeguards for international transfers.

How long we keep it

We keep donation records for 3 years to meet accounting and audit requirements. If you unsubscribe or ask us to delete your details, we remove you from all mailing lists immediately and keep only the minimum financial record we are legally required to hold.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it for a particular purpose, or object to how we are using it. Write to bridgeofhopefoundationsupport@gmail.com and we will respond within 30 days. There is no charge.

If you are unhappy with how we have handled your data, you can complain to Kenya's Office of the Data Protection Commissioner. If you are in the UK, you can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

When you open this site, your browser sends one small request to our server, so that the server is awake by the time you reach the giving page. It contains nothing about you, sets no cookie, and the only thing kept in your browser is the time of that request, until you close the tab.

We use Google Analytics and PostHog to understand how the site is used: which pages are visited, which buttons and links are clicked, roughly where visitors come from, and which device they use. It only runs if you choose “Accept” on the notice shown on your first visit, and you can decline with no effect on the site. These tools set cookies or similar storage in your browser; we turn off advertising features and do not use the data for advertising. We never send names, email addresses, what you type into a form, or anything about the children in our care. Analytics does not run on the staff area or on the pages where donors manage their gifts. When a gift is confirmed, our server also records that a gift of a given size, currency and type (monthly or one-off) was completed; this contains nothing that identifies the donor. The data is held by Google and PostHog, which may process it outside Kenya, the UK and the EU. To change your mind, clear this site's data in your browser and choose again.

Apart from that, the only cookie this site sets is a secure sign-in cookie for staff using the admin area — it is never set for donors or ordinary visitors.

Children's data

We do not publish the real names or personal details of the children in our care. Photographs of children appear on this website only with written consent from their legal guardian. In stories we use changed names, and we do not publish details that could identify a child. Records about children are held confidentially in line with our child protection policy and Kenyan law.

Changes to this policy

If we change this policy we will update the date at the top of the page, and we will email monthly donors if the change is significant.