Privacy Policy

1. INTRODUCTION

Visionary Alliance For Ruto ("VAR", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PowerHub Campaign Platform (the "Platform").

By registering as a supporter, volunteer, county coordinator, or using any features of the Platform, you consent to the data practices described in this policy.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

When you register or interact with our Platform, we collect:

• Identity Information: Full name, username, password, date of birth
• Contact Information: Email address, phone number
• Government Identification: National ID number (for verification purposes)
• Location Information: County, constituency, and ward of residence
• Political Affiliation: Your support for the VAR campaign

2.2 Information You Provide Voluntarily

• Donation Information: Payment details, donation amount, campaign preferences
• Volunteer Information: Skills, availability, emergency contact details
• Story Submissions: Testimonials, photos, videos, and personal stories
• Event Participation: Rally RSVPs, attendance records, guest information
• Task Completion Records: Volunteer task history and feedback

2.3 Automatically Collected Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, features accessed
• Location Data: Approximate geographic location based on IP address
• Activity Logs: Login times, actions taken, content viewed

2.4 Information from Third Parties

• Social Media: Public posts mentioning our campaign
• Payment Processors: Transaction confirmation (M-Pesa, Stripe, PayPal)
• Communication Services: SMS delivery status, email open rates

3. HOW WE USE YOUR INFORMATION

3.1 Core Campaign Operations

• Supporter Management: Track supporter registration across all 47 counties
• Volunteer Coordination: Assign tasks, track participation, manage availability
• Rally Organization: Manage RSVPs, attendance, and event logistics
• Fundraising: Process donations, issue receipts, track fundraising progress

3.2 Communication

• Send campaign updates, rally reminders, and volunteer task notifications
• Respond to inquiries and support requests
• Share press releases and campaign announcements
• Request feedback and conduct surveys

3.3 Analytics and Improvement

• Analyze supporter demographics and engagement patterns
• Measure campaign performance across counties
• Improve user experience and Platform features
• Generate strategic insights for campaign leadership

3.4 Legal and Security

• Verify identity and prevent fraudulent activity
• Comply with legal obligations and regulatory requirements
• Investigate security incidents and enforce our terms
• Protect the rights, property, and safety of VAR and its supporters

4. HOW WE SHARE YOUR INFORMATION

4.1 Within the Campaign Organization

• County Coordinators: Access supporter information within their assigned county
• Campaign Executives: View national supporter analytics and intelligence
• Media Team: Access supporter stories (with consent) for campaign materials
• Security Team: Monitor system logs and security events

4.2 With Service Providers

We share information with trusted third parties who assist us with:

• Payment Processing: Safaricom (M-Pesa), Stripe, PayPal
• Communication Services: Africa's Talking (SMS), SendGrid (Email)
• Cloud Hosting: Namecheap, cPanel
• Analytics: Internal analytics systems

4.3 When Required by Law

• Respond to legal requests, court orders, or government regulations
• Protect against legal liability or fraud
• Enforce our terms and conditions

4.4 With Your Consent

• Feature your story on our website or social media (with explicit consent)
• Share your testimonial in campaign materials
• Publish your photo or video content

5. YOUR RIGHTS AND CHOICES

5.1 Access and Correction

You have the right to:

• Access your personal information stored on the Platform
• Update or correct inaccurate information
• Download your supporter data (available in your portal)

5.2 Consent Withdrawal

You may withdraw consent for:

• Receiving marketing communications (unsubscribe link in emails)
• Publication of your supporter story
• Data sharing for analytics purposes

5.3 Data Deletion

You may request deletion of your account by contacting our support team. Note that:

• Some data may be retained for legal compliance
• Donation records may be kept for financial auditing
• Anonymized analytics data may be retained

5.4 Opt-Out Options

• Email: Click "unsubscribe" in any campaign email
• SMS: Reply "STOP" to any text message
• Notifications: Adjust settings in your supporter portal

6. DATA SECURITY

6.1 Security Measures

We implement industry-standard security measures:

• Encryption: All data transmitted via SSL/TLS encryption
• Authentication: Two-factor authentication for sensitive roles
• Access Control: Role-based permissions restricting data access
• Monitoring: 24/7 security monitoring and threat detection
• Backups: Regular encrypted backups of all data

6.2 Data Retention

• Active Supporters: Data retained while account is active
• Inactive Accounts: Retained for 24 months after last activity
• Donation Records: Retained for 7 years (legal requirement)
• Activity Logs: Retained for 12 months
• Deleted Accounts: Anonymized within 30 days of deletion request

6.3 Breach Notification

In the event of a data breach, we will:

• Notify affected users within 72 hours of detection
• Report to relevant authorities as required by law
• Provide guidance on protective measures

7. COOKIES AND TRACKING

7.1 Cookies We Use

• Essential Cookies: Required for login and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Track usage patterns and improve performance
• Session Cookies: Maintain your login session

7.2 Your Cookie Choices

• Most browsers accept cookies by default
• You can modify browser settings to reject cookies
• Disabling cookies may affect Platform functionality

8. CHILDREN'S PRIVACY

• The Platform is not intended for individuals under 18 years of age
• We do not knowingly collect information from minors
• If we discover a minor has registered, we will delete the account

9. INTERNATIONAL DATA TRANSFER

• Our servers are located in Kenya and may be processed in other countries
• We ensure appropriate safeguards for international data transfers
• By using the Platform, you consent to this transfer

10. THIRD-PARTY LINKS

• The Platform may contain links to external websites
• We are not responsible for the privacy practices of third parties
• We encourage you to read their privacy policies

11. CHANGES TO THIS PRIVACY POLICY

• We may update this policy periodically
• Changes will be posted on this page with updated revision date
• Significant changes will be notified via email or Platform notification
• Continued use of the Platform constitutes acceptance of changes

12. SPECIFIC FEATURE PRIVACY NOTICES

12.1 Donations

• Payment information is processed by secure third-party providers
• We do not store full credit card or M-Pesa credentials
• Donation amounts and frequency may be displayed on leaderboards (anonymously if requested)

12.2 Volunteer Tasks

• Task completion records are visible to coordinators
• Your name may appear on volunteer leaderboards
• Emergency contact information is only accessible to coordinators

12.3 Rally Attendance

• RSVP status is visible to event organizers
• Check-in records confirm your attendance
• Photos from rallies may be published on our website

12.4 Supporter Stories

• Stories require explicit consent for publication
• You may request removal of your story at any time
• Featured stories are displayed on the homepage and social media

12.5 County Analytics

• Aggregated county data is used for campaign intelligence
• Individual supporter data is not publicly displayed
• County coordinators can view supporter lists within their county

13. YOUR KENYAN DATA PROTECTION RIGHTS

Under the Kenya Data Protection Act (DPA), you have the right to:

14. CONTACT INFORMATION

15. COMPLAINTS

If you believe your privacy rights have been violated:

1. Contact our Data Protection Officer directly
2. Allow 30 days for investigation and response
3. If unsatisfied, file a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya

16. CONSENT

By registering for the VAR PowerHub Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.