Maisha Na Cancer

Privacy Policy

1. INTRODUCTION

The Integrated Cancer Research Foundation, the details of which are indicated in the ICRF’s Terms of Service, carries out research activities and provides information about its work, programs and activities through its websites.   

ICRF-Kenya seeks to ensure the highest level of data privacy when providing information across all its websites and platforms to our website visitors (collectively, “You”, or “Users“).

At ICRF-Kenya, the privacy and security of our users is of paramount importance. We are committed to protecting the data you share with us. When this Policy mentions “ICRF”,  “we,” “us“, or “our“, it refers to Integrated Cancer Research Kenya that is responsible for the protection of your personal information in line with this Privacy Policy (“Data Controller“).

This Privacy Policy (“Policy“) explains how ICRF processes information that can be used to directly or indirectly identify an individual (“Personal Data“) collected on our site.  All personal data are processed in accordance with the Kenya Data Protection Act, 2019. For any questions regarding this Policy or any requests regarding the processing of personal data, please contact us at privacy@cancerresearchkenya.org.  

2. GENERAL PRINCIPLES. CONFIDENTIALITY

ICRF shall process all Personal Data adhering to the general data processing principles:

  • lawfully, fairly and in a transparent manner in relation to the data subject (lawfulness, fairness, and transparency);
  • collect and process Personal Data only for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (purpose limitation);
  • ensure that Personal Data is adequate, relevant and limited to what is necessary for relation to the purposes for which they are processed (data minimization).
  • ensure that Personal Data is accurate and, where necessary, kept up to date (accuracy).
  • ensure that Personal Data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (storage limitation).
  • process Personal Data in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (integrity and confidentiality). 

All and any information stored on ICRF’s websites is treated as strictly confidential. All information is stored securely and is accessed by qualified and authorized personnel only.

3. Information We Collect

3.1. Information You provide to us.

Information that is necessary for the use of the ICRF Platform 

We ask for and collect the following personal information about you when you use the ICRF’s Platform. This information is necessary for the adequate performance of the contractual arrangement which is in place between you and us and to allow us to comply with our legal obligations. Failing to provide any of this data or decision to delete or object to the processing of any of such data may result in restricted services in the use of our website services.

  • Visitors and users of our User’s websites or services. We may collect information pertaining to visitors and users of our User’s websites or services (“Users-of-Users”), solely for and on our Users’ behalf. 
  • Programs/Activities Registration. When you provide information to ICRF through completion of registration forms to ICRF events and programs or communicate with us (using contact forms), we collect information about your details and communication and any information you choose to provide or disclose. In order to respond to your request, we may access information provided in your forms, etc. 
  • Communications, Chats, Messaging. When you communicate with ICRF (using the general inquiries window), we collect information about your communication and any information you choose to provide or disclose.
  • Job applicants’ information. We also collect information that you provided to us by applying to be a volunteer through the form published at https://cancerresearchkenya.org/volunteer by e-mail or otherwise.

 

You may also choose to provide us information when you respond to surveys, post to community forums, participate in activities, or use other features of ICRF’s websites. We advise against posting any information you don’t wish to make public on the ICRF Platform. If you upload any content on our website in any other way as part of the use of any Service, you do so at your own risk.

ICRF processes information you provide to us on the legal basis of:

  • Your consent, expressed when voluntarily submitting and filling your Personal Data details in sign-up forms, by e-mail, request or inquiries window, etc; and
  • Conclusion and performance of contractual arrangements and obligations between ICRF and the User;
  • Pursuance of legitimate interests of ICRF, as Data Controller and manager of ICRF websites;

Disclaimer

Please always take care and observe at least the following minimum requirements for the protection of your personal information:

  • please omit using your name, address, telephone number, e-mail, or other special (sensitive) data, etc. in the subject of the request or file name;
  • please omit using your personal details such as health, family member details, or other specific (sensitive) data, in the texts of requests, e-mails or similar communication to us, and
  • please make sure that the remaining personal data is only indicated to the extent necessary for the purposes for which the letter, request or inquiry is sent.

Right to delete your data

You may at any time access and edit, update, or delete your contact details by contacting us at privacy@cancerresearchkenya.org.

3.2. Information We Collect when You use the Platform

When you use our website’s contact forms or contact us directly by any communication channel, we may collect information, including personal information, about the services you use and how you use them.

This information is necessary for the adequate performance of the contract between you and us, to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the functionalities of the ICRF Platform.

Automatic collection of data

  • Log data and Device information. We automatically collect log data and device information when you access and use ICRF’s websites, even if you have not logged in. That information includes, among other things: Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp and/or clickstream data.
  • Tracking technologies and Cookies. We use cookies, tags, scripts and other similar technologies, such as CI codes (click tracking), ISC (source tracking), and ITC (item tracking codes). We also automatically collect information about your device’s operating system, phone model, device ID and customer number. For more detail information on the use of these technologies, see our Cookies Policy.
  • Usage information. We use a tool called “Google Analytics” to collect information about your interactions with the ICRF website (what pages you visit, such as the pages or content you view, your searches for Listings, bookings you have made, and other actions on the ICRFwebsite. In consequence, Google, Inc. plants a permanent cookie on your web browser to identify you as a unique user the next time you visit this Site). For more information please visit Google.
  • Geo-location data. We collect information about your approximate location as determined by data such as your IP address to offer you an improved user experience and comply with applicable legal requirements, such as taxes, pricing, etc. Such data may be collected only when you access ICRF websites using your device.

ICRF processes this information on the legal basis of:

  • Your consent;
  • Conclusion and performance of contractual arrangements and obligations between ICRF and the User;
  • Pursuance of legitimate interests of ICRF, as Data Controller and manager of ICRF platform.

4. HOW WE USE YOUR DATA?

We use, store, combine and process information, including personal information, about you to provide, understand, improve, and develop the ICRF website, create and maintain a trusted and safer environment and comply with our legal obligations.

  • To Create Aggregated Statistical Data, to Carry out Market Research and Analysis necessary for running out our business, to improve our services we use aggregated and/or inferred non-personal information enabling us to evaluate our customers’ needs, sales and other trends of our activities.
  • To Stay Connected. We use information about data usage, devices, operating systems to diagnose problems with our servers, to administer our Platform, adopt decision when to retire SDK’s/OS versions, to identify characteristics of major users so that we may optimize our applications and services and make your browsing and purchasing experience more enjoyable.
  • To Customize Marketing. To provide more customized offers to our Users, we may conduct data analysis based on information you provide to us, your interactions with the ICRF Platform and its Users.
  • To Send Service and Billing Messages. ICRF may also contact you with important information regarding our Services, or your use thereof. For example, we may send you a notice (through any of the communication channels available to us) if a certain Service is temporarily suspended for maintenance; reply to your support ticket or e-mail; send you reminders or warnings regarding upcoming or late payments for your current or upcoming subscriptions; forward abuse complaints regarding your hosting plan; or notify you of material changes in our Services. Such kind of communication is essential, for this reason, no opt-out possibilities are given to avoid receiving such Service and Billing Messages unless you are no longer a ICRF User (which can be done by deactivating your Account).
  • To contact you. In order to notify you regarding your Account, to troubleshoot problems with your Account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes, we may contact you via email, telephone, text messages, and portal.
  • To provide, operate and improve the Services.
  • To enhance data security and to prevent fraud.
  • To comply with applicable laws and regulations.

5. Job Applications

ICRF welcomes all qualified applicants to apply to any of the open positions published at https://www.cancerresearchkenya.org/volunteer, by sending us their contact details and CV (“Applicants Information”) via the Volunteer Application Form on our Website, or through any other means provided by us.

We understand that privacy and discreteness are crucial to our Applicants and are committed to keep Applicants Information private and use it solely for ICRF’s internal recruitment purposes (including for identifying Applicants, evaluating their applications, making hiring and employment decisions, and contacting Applicants by phone or in writing).

ICRF may retain applicants’ Information submitted to it for no longer than one year after the applied position has been filled or closed. We collect this information to re-consider Applicants for other positions and opportunities at ICRF; we can use their Applicants Information as reference for future applications submitted by them; and if the Applicant is hired, for additional employment and business purposes related to his/her work at ICRF.

If you previously submitted your Applicants Information to ICRF, but now wish to access it, update it or have it deleted from our systems, please contact us at privacy@cancerresearchkenya.org.

6. DIRECT MARKETING AND SERVICE EXPIRATION NOTICES/RENEWAL REMINDERS

When you provide information through registering for our events or programs, you are free to give consent and/or opt-out from receiving updates and/or notices directly to your email. We use provided contact details and preferences for reminders and invites.

If a User wishes to change their preferences communication (revoke consent or object), they are free to exercise such option at any time they wish by (1) following the instructions to unsubscribe in the received email (usually, by clicking on a link for that purpose at the bottom of our e-mail); (2) by writing to us at privacy@cancerresearchkenya.org. You may also at any time refuse to receive information from us by sending an email to privacy@cancerresearchkenya.org.

7. OTHER USES OF YOUR PERSONAL DATA

  • Developing Platform. We use data, including public feedback, to conduct research and development for the further development of our platform in order to provide you and others with a better, more intuitive and personalized experience, drive membership growth.
  • User Support. We use data to help you and fix problems. We use the data (which can include your communications) to investigate, respond to and resolve complaints and issues (e.g., bugs).
  • Aggregate Insights. We use data to generate aggregate insights. We use your data to produce and share aggregated insights that do not identify you.
  • Security and Investigations. We use data for security, fraud prevention and investigations. We use your data (including your communications) if we think it’s necessary for security purposes or to investigate possible fraud or other violations of our Terms of User or this Policy and/or attempts to harm our Users.

8. SOURCES OF PERSONAL DATA

We collect and receive your Personal data from yourself (including your device) as well as from the following sources:

  • Social network operators (such as Facebook, Google, etc.);
  • Third-party service providers, suppliers and our partners;
  • Other legal sources.

9. RETENTION AND DELETION

We generally retain your personal information for as long as is necessary to provide our services and to comply with our legal obligations. Where your personal information is no longer required we will ensure it is securely deleted.

If you would like to stop us from using your personal information, please write to us at privacy@cancerresearchkenya.org requesting that we erase your personal information.

10. DATA TRANSFERS AND USE OF THIRD-PARTY SERVICES

While collecting and processing your Personal Data, we may perform data transfers to various third parties.

10.1. With your consent

We will share your Personal Data with companies, organizations or individuals outside our group of companies when we have your consent to do so.

10.2. Where do we process your personal data?

  • Users’ Personal Information is maintained, processed and stored by ICRF in Kenya.
  • Volunteer Job Applicants Information will be maintained, processed and stored in Kenya, and as necessary, in secured cloud storage provided by our Third-Party Services.
  • ICRF is based in Kenya and offers an adequate level of protection for the Personal Information of Kenyan residents.
  • ICRF and third party service providers (such as third-party online traffic and website analysis, statistics, direct marketing services, mailers, messengers), that store or process your personal data as well as personal data of your users on ICRFs behalf are each contractually committed to keep it protected and secured, in accordance with industry standards and regardless of any lesser legal requirements which may apply in their jurisdiction (see below).

We may share non-personally identifiable information publicly as well as with our partners. For example, we may share information publicly to show trends about the general use of our platform.

Transfer, disclosure of data to competent authorities.  In certain situations, ICRF may be asked to disclose personal data in response to lawful requests by public authorities, other competent authorities, including when it is required to meet national security or law enforcement requirements, and will do so where permitted by local data protection laws.

10.3. Data Localisation Obligations

If you reside in a jurisdiction that imposes “data localisation” or “data residency” obligations (i.e., requiring that Personal Information of its residents be kept within the territorial boundaries of such jurisdiction), and this fact comes to our attention, we may maintain your Personal Information within such territorial boundaries, if we are legally obligated to do so.

You acknowledge that while doing so, we may continue to collect, store and use your Personal Information elsewhere.

10.4. Targeting, advertising

If you reside in a jurisdiction that imposes “data localisation” or “data residency” obligations (i.e., requiring that Personal Information of its residents be kept within the territorial boundaries of such jurisdiction), and this fact comes to our attention, we may maintain your Personal Information within such territorial boundaries, if we are legally obligated to do so.

You acknowledge that while doing so, we may continue to collect, store and use your Personal Information elsewhere.

10.5. Social Media Features

Our Services include certain Social Media features such as the “Share this” button. These Social Media Features may collect information such as your IP address or which page you are visiting on our Website and may set a cookie to enable them to function properly. Social Media Features are either hosted by a third party or hosted directly on our Services. Your interactions with these third parties’ Social Media Features are governed by their respective policies.

10.6. Our Legal Obligation to Use or Disclose Personal Data

We will reveal your Personal Data to state and public authorities without your prior permission only when we are legally required to provide information, including taking legal action to defend our rights, as well as the cases, where we have a belief in good faith that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable law, regulation, legal process or enforceable governmental request, enforce applicable Terms of Services, including investigation of potential violations, detect, prevent or otherwise address fraud, security or technical issues.

10.7 Other

We may share your personal data in manners other than as described above, pursuant to your explicit consent, or if we are legally obligated to do so.

11. SECURITY

ICRF-Kenya has implemented security measures designed to protect the Personal Information you share with us, including physical, electronic and procedural measures. Among other things, we offer HTTPS secure across all our websites. We also regularly monitor our systems for possible vulnerabilities and attacks, and regularly seek new ways and Third-Party Services for further enhancing the security of our Services and protection of our Visitors’ and Users’ privacy. 

Regardless of the measures and efforts taken by ICRF, we cannot and do not guarantee the absolute protection and security of your Personal Information, or any other User Content you upload, publish or otherwise share with ICRF or anyone else.

If you have any questions regarding the security of our website, you are welcome to contact us at privacy@cancerresearchkenya.org.

12. YOUR RIGHTS

You are entitled to a range of rights regarding the protection of your Personal Data, which are subject to limitations, restrictions and conditions as laid down in GDPR and applicable law. Those rights are:

  • the right to access the information we process about you;
  • the right to rectify incorrect/inaccurate information about you;
  • the right to transfer all or part of the information collected about you to you or another data controller, where technically feasible;
  • the right to erase any data concerning you. Users may demand erasure of data without undue delay for legitimate reasons, e.g. where data is no longer necessary for the purposes it was collected, or where the data has been unlawfully processed;
  • the right to the restriction of data processing. Users, for legitimate purposes, may obtain restriction of data processing from the controller;
  • the right to object to the processing of Personal Data when processing is carried out on the basis of legitimate interest, as well as in cases of use of your personal data for direct marketing purposes, as specified above in this Policy.

 

Some of the rights as above are easy to exercise: i.e., you may at any time access and edit, update or amend your details, opt out of receiving communications from us and our partners by visiting and adjusting your personal account settings, or by e-mail: privacy@cancerresearchkenya.org

13. ACCEPTANCE OF THIS POLICY

We assume that all Users of ICRF-Kenya websites have carefully read this document and agree to its contents. If someone does not agree with this Policy, they should refrain from using our website. We reserve the right to change our Policy at any time and inform by using the way as indicated in Section 14. Continued use of ICRFs websites and mobile applications implies acceptance of the revised Policy.

This Policy is an integral part of ICRFs Terms and Conditions.

We will ask for your consent before using information for a purpose other than those set out in this Policy.

14. CONTACTS

For all your requests or comments concerned with this Privacy Policy, please contact: privacy@cancerresearchkenya.org

15. APPLICATION OF POLICY

Our Policy applies to all of the services offered by us and our affiliates, including cancerresearchkenya.org, maishanacancer.co.ke and oncoafrica.org, organized under the laws of the Republic of Kenya, legal address at P. O. Box 497 – 00515 Nairobi Kenya. 

Our Policy does not apply to services offered by other companies or individuals, including products or sites that may be displayed to you in search results, sites that may include our services or other sites linked from our services. 

15. APPLICATION OF POLICY

Our Policy may change from time to time. We will post any Policy changes on our website and, if the changes are significant, we may consider providing a more explicit notice (including, for certain services, email notification of Policy changes).

17. FURTHER INFORMATION

If you have any further questions regarding the data ICRF collects, or how we use it, then please feel free to contact the Data Protection Officer at the details as indicated above hereof.