Privacy Policy

1. Introduction

The Youth Transition Initiative, presented publicly as the Kenya Youth Transition Initiative (KYTI), respects your privacy and is committed to protecting personal information you share through https://kyti.co.ke/ and through our programmes and activities.

This policy explains how we collect, use, store, disclose and protect personal information when you visit our website, register as a member, create an account, submit an application, contact us, participate in our activities or otherwise interact with KYTI.

We aim to handle personal information in accordance with applicable Kenyan data protection law, including the Data Protection Act, 2019. Where the law requires consent, we will seek it as appropriate. Simply browsing this page does not mean that you have consented to every type of processing described here.

2. Information We Collect

The information we collect depends on how you interact with KYTI and which website features you use. It may include:

a. Personal and contact information

• Your name, email address and telephone number.
• Your county, town, community or other location details that you choose to provide.
• Information you include in messages, enquiries or contact forms.

b. Membership and account information

• Details submitted when applying for membership or creating an online account.
• Account identifiers, login-related records and profile information needed to administer access.
• Membership status and relevant admission or cessation information.

KYTI’s Constitution provides for a register of members that includes names, addresses, contact details and membership dates, along with other information the Board may require. Such records should be handled with appropriate access controls and in accordance with applicable law.

c. Applications and programme information

• Information submitted through mentee applications, group registration, opportunity applications and other programme forms.
• Interests, skills, experience, organisation or community involvement where relevant to the programme.
• Information reasonably needed to assess applications, coordinate activities and evaluate programme outcomes.

d. Community activity information

We may record participation, attendance, activity outcomes, photographs, videos or testimonials connected with KYTI activities. Identifiable images, stories and testimonials should be collected and used only with an appropriate lawful basis and any required permissions.

e. Technical information

Our hosting provider, website or enabled tools may process technical information such as IP address, browser and device details, pages visited, security logs and basic usage information. The precise information depends on the website configuration and tools actually enabled.

3. How We Use Your Information

KYTI may use personal information for legitimate organisational and programme purposes, including to:

• Receive and assess membership applications and maintain membership records.
• Create and administer website accounts and provide account support.
• Respond to enquiries, requests and complaints.
• Coordinate education, mentorship, youth empowerment, civic engagement, digital literacy and other KYTI programmes.
• Communicate relevant programme information, opportunities, notices and updates.
• Document activities, assess outcomes and prepare organisational or programme reports.
• Maintain website functionality, protect accounts, prevent misuse and investigate security incidents.
• Meet applicable legal, regulatory, safeguarding, governance and accountability obligations.
• Improve our website, services and programmes.

We aim to use information for specific purposes, limit collection to what is reasonably necessary and avoid using information in ways that are incompatible with the purpose for which it was collected unless otherwise permitted by law.

4. Legal Grounds for Processing

Depending on the situation, KYTI may process personal information where it is necessary to take steps you request, perform an applicable agreement, comply with a legal obligation, pursue a legitimate and lawful organisational purpose, protect vital interests, or where you have given consent. The appropriate legal basis depends on the specific activity and applicable law.

Where processing relies on consent, you may withdraw that consent. Withdrawal does not affect processing that lawfully took place before withdrawal, and it may not prevent processing that has another valid legal basis.

5. Photographs, Videos and Stories

KYTI may document training, community engagements, youth activities and other programmes for educational, reporting, awareness and communication purposes.

Before using identifiable photographs, videos, names, testimonials or personal stories in public-facing materials, KYTI will seek the required permission or establish another lawful basis, as applicable. We will take particular care when documenting children and other potentially vulnerable participants and apply additional safeguards required by law.

If you have a concern about an image, story or other identifiable information published by KYTI, contact info@kyti.co.ke. We will review the concern and take appropriate action where warranted.

6. When We Share Information

KYTI does not intend to sell your personal information. We may share information where necessary and lawful with:

• Authorised KYTI personnel responsible for membership, programmes, applications, communications or administration.
• Website hosting, maintenance, email and technology providers supporting our operations.
• Programme partners, funders or collaborating organisations, where sharing is necessary for a stated purpose and is lawful.
• Relevant authorities where disclosure is required by law or a lawful request.
• Other recipients where you have given valid consent or another lawful basis applies.

We aim to limit disclosures to the information reasonably necessary and use appropriate safeguards. Third-party service providers may also have their own privacy terms. We will not treat membership or programme participation as blanket permission to disclose all personal information.

7. Cookies, Hosting and Third-Party Services

Our website is hosted by a third-party provider. The provider may process information needed to operate, maintain and secure the website.

The website may use cookies or similar technologies for functionality, security, account access or other enabled features. The cookies actually used depend on the WordPress configuration and installed tools. You can manage cookies through your browser settings, although disabling some cookies may affect website features.

If analytics, embedded media, social media integrations, payment tools or other third-party services are enabled, those services may collect information under their own privacy practices. KYTI should disclose relevant tools and obtain consent where required before enabling technologies that require it.

8. Data Security

KYTI aims to use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Measures should include limiting access to authorised personnel, appropriate account permissions, website security practices and suitable arrangements with service providers.

No website, internet transmission or electronic storage system can be guaranteed completely secure. Keep your login details confidential and contact us if you suspect unauthorised access to your account. If a personal data breach occurs, KYTI will assess and respond in accordance with applicable legal requirements.

9. How Long We Keep Information

KYTI will retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including membership administration, programme delivery, reporting, safeguarding, legal compliance and resolving disputes.

Retention periods should reflect the type of record, its purpose and any legal or governance obligations. When information is no longer required, KYTI will take reasonable steps to securely delete, anonymise or otherwise dispose of it, subject to any lawful requirement to retain it.

10. Your Data Protection Rights

Subject to applicable law and relevant exceptions, you may have rights to:

• Be informed about the collection and use of your personal information.
• Request access to personal information KYTI holds about you.
• Request correction of inaccurate, incomplete or misleading information.
• Request deletion of personal information where the law permits.
• Object to certain processing or request restriction where applicable.
• Withdraw consent where processing is based on consent.
• Exercise other rights provided under applicable data protection law.
• Lodge a complaint with Kenya’s Office of the Data Protection Commissioner (ODPC).

To make a request, email info@kyti.co.ke and include “Privacy Request” in the subject line. Please describe your request clearly. We may need to verify your identity and will respond in accordance with applicable law.

You may also visit the ODPC website at www.odpc.go.ke for information about data protection rights and complaints.

11. Children and Young People

KYTI’s objectives include working with young people. We recognise the importance of protecting their privacy, safety and dignity.

Where information relates to a child, KYTI will apply safeguards and obtain parental or guardian consent where required by law. We will take particular care with photographs, personal stories, contact details and information that could expose a young person to harm.

We do not intend to collect children’s personal information unnecessarily. If you believe a child’s information has been submitted or published inappropriately, contact us so that we can assess the concern and take appropriate action.

12. Links to Other Websites

Our website may contain links to third-party websites, social media platforms or external resources. KYTI does not control the privacy practices of those websites. Review the relevant provider’s privacy policy before submitting personal information to an external service.

13. International Transfers

Some hosting or technology providers may process or store information outside Kenya. Where personal information is transferred outside Kenya, KYTI will take the steps required by applicable law, including ensuring that relevant transfer conditions and safeguards are satisfied.

14. Changes to This Privacy Policy

KYTI may update this policy to reflect changes in our programmes, website features, technology or legal obligations. We will publish the updated version on this page and revise the “Last updated” date. We encourage members and visitors to review this page periodically.