Who we are
MASO (Miles Art & Sports CBO) is a registered Community-Based Organisation in Kenya. We collect personal data when you contact us, donate, volunteer, or participate in our programmes. We are committed to processing your data lawfully, fairly, and transparently in line with the Kenya Data Protection Act, 2019.
What data we collect
We may collect the following information:
- Contact form submissions: Name, email address, message content, and how you'd like to help
- Donor information: Name, contact details, donation amount, and payment reference
- Volunteer information: Name, contact details, skills, and availability
- Programme participants: Child's name, age, school, parent/guardian contact, health information relevant to activities
- Website usage: Basic analytics (pages visited, visit duration) — no personal identification
How we use your data
- To respond to your enquiries and messages
- To process and acknowledge donations
- To administer volunteer placements
- To deliver safe and effective programmes for children
- To send programme updates (only with your consent)
- To meet legal and safeguarding obligations
Legal basis for processing
We process your data on the following grounds:
- Consent — When you submit a form or sign up for communications
- Legitimate interest — To operate our programmes and respond to enquiries
- Legal obligation — To meet safeguarding and regulatory requirements
- Vital interest — To protect a child's safety in an emergency
Data sharing
We do not sell or share your personal data with third parties for marketing purposes. We may share information with:
- Child protection authorities (in cases of safeguarding concern)
- Funding partners (anonymised and aggregated programme data only)
- Service providers who process data on our behalf (e.g., email systems), under appropriate agreements
Data retention
We retain personal data only as long as necessary:
- Contact form messages: 12 months
- Donor records: 7 years (for financial accountability)
- Safeguarding records: Retained indefinitely in line with child protection guidance
- Programme participant data: Duration of participation + 3 years
Your rights
Under the Kenya Data Protection Act, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (where legally permissible)
- Withdraw consent at any time
- Lodge a complaint with the Office of the Data Protection Commissioner
Safeguarding exception
If a contact form submission or communication contains a report of harm to a child, we will treat it as a safeguarding concern and may share relevant information with child protection authorities regardless of other data preferences. See our Safeguarding Policy.
Contact us about your data
To exercise any of your data rights, or to ask questions about this notice, contact us at:
Email: privacy@masocbo.org
Post: MASO, Eldoret, Uasin Gishu County, Kenya
