Privacy Policy

Privacy policy

Last updated: [29/10/2026]

Strategic Initiatives for Growth and Agency in Africa (SIGAA) is a Nairobi-based technical agency. This Privacy Policy explains how we collect, use, disclose and safeguard your personal information when you visit our website (https://sigaa.or.ke) or contact us. By using the website, you agree to the practices described here. If you do not agree, please do not use the website.

Information we collect

Information you send us. We collect personal information only when you choose to contact us, for example by emailing rkendagor@sigaa.or.ke or sikenye@sigaa.or.ke. This may include your name, email address, organisation, job title, phone number and anything else you write.

Information collected automatically. Our hosting provider keeps standard server logs, which may include your IP address, browser type, operating system, pages visited, and the date and time of your visit. These logs keep the website running and secure.

How we use your information

  • To respond to your enquiry and handle any follow-up.
  • To share information about our work with people who have asked to receive it.
  • To keep the website running, secure and working properly.
  • To meet our legal and record-keeping obligations.

Legal basis for processing

Under the Data Protection Act, 2019 of Kenya, we process your personal data on the following grounds: your consent, where you have given it; the need to respond to a contract or enquiry you have made with us; compliance with legal obligations; and our legitimate interests in running and securing the website and responding to enquiries, where those interests are not overridden by your rights.

How we share your information

We do not sell, trade or rent your personal information. We may share it only:

  • with your consent;
  • with trusted service providers, such as our hosting provider, who help us run the website and are bound to keep the information confidential;
  • with professional advisers, such as lawyers or auditors, where necessary; or
  • where required by law, court order or government regulation, or where necessary to protect the rights or safety of others.

Security

We take reasonable technical and organisational measures to protect your information against unauthorised access, alteration, disclosure or destruction. These include secure hosting, strong access controls for website administration, and regular backups. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

How long we keep information

We keep emails for as long as needed to respond to your enquiry and to meet our legal and record-keeping obligations. Server logs are kept by our hosting provider for a limited period. When information is no longer needed, we delete it or anonymise it.

Your rights

Under the Data Protection Act, 2019, you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data in certain circumstances;
  • ask us to restrict how we process your data in certain circumstances;
  • ask for your data to be transferred to you or to another organisation, in certain circumstances;
  • object to our processing of your data in certain circumstances; and
  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email rkendagor@sigaa.or.ke.

Cookies and external services

This website does not use analytics, advertising or tracking cookies. WordPress may set a cookie when someone logs in to manage the website. The site loads its fonts from Google Fonts, which may record your IP address when the page loads. You can control cookies through your browser settings.

Links to other websites

The website may contain links to other websites. We are not responsible for the privacy practices of those sites, so please review their policies before sharing personal information with them.

Children’s privacy

This website is not directed at children under 18, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, please contact us and we will delete it.

International data transfers

Our website is hosted and operated from Kenya, but some service providers may process data in other countries. Where we transfer personal data outside Kenya, we take steps to ensure it is protected in line with the Data Protection Act, 2019.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page.

Contact us

Strategic Initiatives for Growth and Agency in Africa (SIGAA)
Rosami Court, Fourth Floor, Office Number 8
Muringa Road off Elgeyo Marakwet Road
P.O. Box 21753-00100
Nairobi, Kenya

Email: rkendagor@sigaa.or.ke (Ruth Kendagor, Managing Director)
Email: sikenye@sigaa.or.ke
Website: sigaa.or.ke

Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Nairobi, Kenya. Website: www.odpc.go.ke.

Consent

By using this website, you acknowledge that you have read and understood this Privacy Policy.