Privacy notice

NGO Directory Africa (“we”) is part of NGO Portal Africa. We process personal data in line with the Kenya Data Protection Act, 2019 and, where it applies, other African data protection laws and the EU and UK GDPR.

What we collect

• Account data: your name, e-mail, optional phone, organisation, role and country, and your password (stored encrypted).
• Organisation profiles: information about organisations. Contact details are the organisation’s official contacts. Names of leaders are limited to public roles.
• Verification contacts and documents: seen only by our team, used to verify organisations.
• Payments: the amount, reference and status. Card details are handled by Paystack and M-Pesa payments by Safaricom; we never see card numbers or PINs.
• Usage and device information: the pages you open, searches, bookmarks and other actions on the site, your IP address, an approximate location worked out from it (city and country, using the DB-IP Lite database), and your device type, browser and operating system. We record this for logged-in members and for anonymous visitors, to keep the service secure, prevent fraud and abuse, understand how the directory is used and improve it. Essential cookies keep you logged in.

Organisation contact details

Organisation contact details (general, department and office e-mails and phone numbers) are collected from the organisations themselves, from public registers and from the organisation’s own website, and are shown only to members with a contact pass. An organisation can ask us to correct or remove any of them.

How we use it

To run your account, show organisation profiles, deliver enquiries, process payments, verify organisations and keep the directory safe. We do not sell personal data.

Your rights

You can ask to see, correct or delete your personal data, or object to its use, by e-mailing admin@ngoportal.africa. Organisations can update or remove their profile information by claiming it or contacting us.

Retention

Account data is kept while your account is active and for up to two years after; payment records for as long as the law requires. Usage logs, including IP addresses, are deleted automatically after 12 months.

IP geolocation by DB-IP (CC BY 4.0).