Door Within Door Foundation
Door Within Door Foundation
Open a door

Legal

Privacy Policy

Last updated September 2026

Draft for review by the Foundation and its legal adviser before launch.

Door Within Door Foundation (“we”) respects your privacy. This policy explains what we collect when you use this website or give to us, why, and your choices. We aim to comply with Kenya's Data Protection Act, 2019.

What we collect

  • When you donate: your name, email (optional for one-time M-Pesa gifts), country, the amount, and — for M-Pesa — your phone number, which is required to send the payment prompt. You may add an optional private message and choose to be anonymous.
  • From payment providers: confirmation of whether a payment succeeded, the transaction reference, and for monthly card giving a provider subscription reference.
  • When you contact us: your name, email, optional organisation and your message.

What we never collect

  • Your M-Pesa PIN — it is entered only on your own phone.
  • Your card number, expiry date or security code — these are entered on our card provider's secure checkout.

How we use it

  • To process your gift, confirm it, and send your receipt.
  • To manage monthly giving you have authorised, including letting you cancel.
  • To reply to your enquiries.
  • To keep accurate financial records and prevent fraud.

We do not sell or rent your personal data. We never publish donor phone numbers, email addresses, transaction references or private messages.

Who we share it with

Only the service providers needed to run the service: Safaricom (M-Pesa), our card payment provider, our email delivery provider and our hosting provider — each only for that purpose.

How long we keep it

Donation records are kept as long as required for financial and legal record-keeping. Enquiries are kept only as long as needed to respond.

Your rights

You can ask to access, correct or delete your personal data (subject to record-keeping obligations), or object to its use. Monthly donors can update details and cancel from the donor area.

Cookies

We use only essential cookies — to keep you signed in to the donor area and to protect forms. We do not use advertising cookies.

Contact

For privacy requests, please contact us or email doorwithindoor@gmail.com.