The Vineyard Christian Community Based Organization (“Vineyard,” “we,” “us”) respects your privacy. This notice explains what personal information we process through thevineyardcbo.org and related online services, why we process it, and how you can contact us. It is written for transparency under Kenya’s Data Protection Act, 2019; it is not legal advice.
1. Who we are
We are a community-based organisation serving children and families in Mathare, Nairobi, Kenya, through education, nutrition, faith-based mentorship, and community support.
- Organisation: The Vineyard Christian Community Based Organization
- Location: Mathare, Nairobi, Kenya
- Email: info@vineyardcbo.org
- Phone: +254 718 329 628
For privacy questions or requests about your personal data, email info@vineyardcbo.org with the subject line “Privacy request.”
2. Information we collect
Depending on how you interact with us, we may collect:
Website forms and newsletter
- Contact form: name, email address, subject, and message content
- Volunteer form: name, email, phone number, and area of interest
- Newsletter: email address (you can unsubscribe at any time via the link in our emails)
- Sponsorship interest: details you send when you contact us about sponsorship (for example via the contact form)
Technical and security data
- Essential session cookies used to keep forms secure (for example CSRF protection) and to maintain logged-in staff sessions on Vineyard SMS
- Server logs that may include IP address, browser type, and request time — used for security, troubleshooting, and abuse prevention
We do not currently use third-party advertising or analytics cookies on the public website. If that changes, we will update this notice.
Programme and staff systems (Vineyard SMS)
Our authenticated Student Management System (Vineyard SMS) holds operational records needed to run education, feeding, medical-camp coordination, sponsorship administration, and related programmes. That system is restricted to authorised staff and partners. It is not open to the public.
3. How we use information
We use personal information to:
- Respond to messages, volunteer applications, and partnership or sponsorship enquiries
- Send newsletter updates you have subscribed to
- Operate and improve our website and keep it secure
- Administer programmes, safeguarding, and accountability obligations for children and families we serve
- Comply with applicable law and protect against fraud or misuse
We do not sell your personal information.
4. Children’s privacy
Protecting children is central to our mission. On the public website we do not publish individual child names, photographs, ages, school details, or personal stories for sponsorship browsing, unless a verified parental or guardian consent process specifically authorises that disclosure.
Public medical-camp pages share aggregate programme information only. Detailed child records remain inside Vineyard SMS for authorised users. Sponsorship is offered at programme level; staff can discuss matching privately when you get in touch.
See also our sponsorship overview.
5. Sharing and processors
We may share information only when needed, for example with:
- Hosting and email service providers who process data on our instructions to run the website and communications
- Trusted programme partners (such as sponsorship administration partners) where sharing is necessary to deliver support
- Authorities when required by law or to protect vital interests, safety, or rights
We expect service providers to protect personal data appropriately and use it only for agreed purposes.
6. Retention
We keep personal information only as long as needed for the purposes above, or longer where law, safeguarding, or legitimate organisational records require it. Newsletter addresses are deactivated when you unsubscribe. Contact and volunteer submissions are retained while useful for follow-up and accountability, then deleted or archived according to our internal practices.
7. Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls on Vineyard SMS, and restrictions on confidential uploads. No online system can be guaranteed completely secure; please contact us promptly if you believe your information has been compromised in connection with our services.
8. Your rights
Under Kenya’s Data Protection Act, 2019, you may have rights to request access to your personal data, correction of inaccurate data, deletion or restriction in certain cases, and objection to certain processing. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
To exercise rights related to website forms or newsletter subscription, email info@vineyardcbo.org. We may need to verify your identity before fulfilling a request.
9. Cookies
We use essential cookies and session storage required for security and, for staff, authentication. These are not used for advertising. You can block cookies in your browser, but some forms or admin features may then stop working correctly.
10. External links
Our site may link to third-party websites (for example maps or partner pages). We are not responsible for their privacy practices. Please review their policies separately.
11. Changes to this notice
We may update this page from time to time. The “Last updated” date at the top will change when we do. Continued use of the website after an update means you should review the revised notice.
12. Contact
Questions about this privacy notice: info@vineyardcbo.org · Contact form · Phone +254 718 329 628
Website use is also covered by our Terms & Conditions. Our organisational approach to personal data is set out in our Data Protection Policy. Our commitment to protecting children is set out in our Child Safeguarding Policy. Rules for photos, video, and stories are in our Photography & Media Consent Policy. How we receive and steward gifts is in our Donations Policy.