We collect personal information that you voluntarily provide to us when you register for the services, express an interest in obtaining information about us or our products and services when you participate in activities on the services, or otherwise when you contact us.

This may include your name, email address, contact information, and job designation. We do not process sensitive information like personally identifiable numbers.

All personal information that you provide must be true, complete, and accurate, and you must notify us of any changes to such personal information. Some information such as your internet protocol (IP) address or browser and device characteristics is collected automatically when you visit our web services.

We automatically collect information when you visit, use, or navigate our services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information such as your IP address, operating system, language preferences, and location.

This information is primarily needed to maintain the security and operation of our services and for our internal analytics and reporting purposes.

We may also collect information from third-party sources for the express purpose of providing, administering, or marketing our services.

We process your information to provide, improve, and administer our services, communicate with you for security and fraud prevention, for marketing purposes and to comply with the law.

We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

We may share or transfer your information in connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Affiliates include any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.

We may share your information with our business partners to offer you certain products, services, or promotions.

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. These are:

1. Right to be informed that we are collecting personal data about you;
2. Right to access personal data that we hold about you and request for information about how we process it;
3. Right to request that we correct your personal data where it is inaccurate or incomplete;
4. Right to request that we erase your personal data noting that we may continue to retain your information if obligated by the law or entitled to do so;
5. Right to object and withdraw your consent to the processing of your personal data. We may continue to process if we have a legitimate or legal reason to do so;
6. Right to request restricted processing of your personal data noting that we may be entitled or legally obligated to continue processing your data and refuse your request.

Devimpact Institute has put in place technical and operational measures to ensure the integrity and confidentiality of your data via controls around access control, physical and environmental security, and monitoring and compliance.

1. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
2. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will either delete or anonymize such information and isolate it from any further processing until deletion is possible.

We may store some information (using "cookies") on your computer when you visit our websites. This enables us to recognize you during subsequent visits. The type of information gathered is non-personal (such as the Internet Protocol (IP) address of your computer, the date and time of your visit, which pages you browsed, and whether the pages have been delivered successfully.

We may also use this data in aggregate form to develop customized services - tailored to your individual interests and needs. Should you choose to do so, it is possible (depending on the browser you are using), to be prompted before accepting any cookies, or to prevent your browser from accepting any cookies at all. This will however cause certain features of the website not to be accessible.

Our websites may provide hyperlinks to other locations or websites on the Internet. These hyperlinks lead to websites published or operated by third parties who are not affiliated with or in any way related to us and have been included in our website to enhance your user experience and are presented for information purposes only.

We do not endorse, recommend, approve, or guarantee any third-party products and services by providing hyperlinks to an external website or webpage and do not have any cooperation with such third parties unless otherwise disclosed. We are not in any way responsible for the content of any externally linked website or webpage.

By clicking on a hyperlink, you will leave the Devimpact webpage and accordingly, you shall be subject to the terms of use, privacy, and cookie policies of the other website that you choose to visit.

From time to time, we may need to transfer your personal information outside the Republic of Kenya.

Where we send your information outside Kenya, we will make sure that your information is properly protected in accordance with the applicable Data Protection Laws

Devimpact Institute reserves the right to amend or modify this statement at any time. If Devimpact Institute amends this statement, you can access the most current version of it on the website.

Any amendment or modification to this statement will take effect from the date of notification on the website

If you would like to contact us on any topics in this privacy policy, you can email us at [email protected] or submit a request via our digital platforms.

Legal Basis for Processing (for EU GDPR compliance)
We will process your personal information based on any of the lawful basis provided for under the Data Protection Law:

1. The performance of a Product/Service Agreement with you;
2. Devimpact’s legitimate business interests;
3. Compliance with a mandatory legal obligation;
4. Public interest;
5. Your vital interest.

Any additional legal clauses are specific to the IRES operations or legal requirements.