Privacy Policy

The Women Human Rights Defenders Hub (The Hub) is a Kenyan network supporting women human rights defenders. We are the data controller for personal data processed through this website and platform.

• Postal address: P.O. Box 7403 – 00100, Nairobi, Kenya
• Email: info@whrdhub.org
• Phone: +254 797 538 183

We collect only what we need to run the platform.

• Account information. Your name, email address, and profile photo, provided by you or by your sign-in provider when you create an account.
• Profile information. Details you choose to add, such as your county network, organisation, role, biography, areas of work, and contact preferences. You decide how much of this to share.
• Content you submit. Posts, blogs, comments, reactions, mentorship requests, newsletter sign-ups, resources, and images you upload.
• Technical information. Log data such as IP address, browser type, device type, pages visited, and timestamps, used for security and to keep the service working.
• Communications. Messages you send us by email or through forms on the site.

We do not ask for sensitive personal data as a condition of using the platform. If you choose to publish sensitive information about yourself in a post or profile, remember that it may be visible to other members or to the public depending on where you post it.

You may create an account or sign in using Google. When you do, Google asks for your permission and then shares a limited set of information with us: your name, your email address, your Google profile picture, and your Google account identifier.

• We use this information only to create and secure your account, to identify you inside the platform, and to contact you about your account.
• We do not receive or store your Google password.
• We do not access your Gmail, Google Drive, Contacts, Calendar, or any other Google service data.
• We do not sell information obtained through Google sign-in, and we do not use it for advertising or to build advertising profiles.
• We do not transfer this information to third parties except to the service providers listed in section 5, who process it on our behalf, or where the law requires it.

You can review or revoke the Hub's access at any time from your Google Account permissions page at myaccount.google.com/permissions. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• To create, secure, and administer your account.
• To display your profile and content to the audience you have chosen.
• To operate community features such as the feed, blogs, county networks, and femtorship matching.
• To send you service messages, and newsletters where you have asked for them.
• To keep the platform safe: preventing abuse, spam, impersonation, and unauthorised access.
• To understand, in aggregate, how the platform is used so we can improve it.
• To meet legal obligations.

We rely on your consent, on the performance of our agreement with you, on our legitimate interest in running a safe platform, and on legal obligations, as the case may be.

We do not sell your personal data. We share it only in these situations:

• Other members and the public. Information you publish — your public profile, posts, blogs, and comments — is visible to the audience for that area of the platform.
• Service providers. Companies that host and run the platform on our behalf under contract, including our hosting and database providers (Supabase and Vercel) and our email delivery provider. They may process your data only on our instructions.
• Legal requirements. Where we are required by Kenyan law or a valid court order. Where we can lawfully do so, and where it is safe for the person concerned, we will tell the affected user before disclosing.
• Protection of people. Where disclosure is necessary to prevent serious harm to a person.

Our providers may store data on servers outside Kenya. Where personal data is transferred outside Kenya, we take steps to ensure it remains protected to a standard comparable to that required by the Data Protection Act, 2019, including contractual safeguards with our providers.

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep certain records to comply with the law or to resolve a dispute. Content you published publicly may remain visible if it has been quoted, shared, or archived elsewhere.

Access to the platform is protected by authentication, encryption in transit (HTTPS), role-based access controls, and database-level row security. Staff access to member data is limited to those who need it. No system is perfectly secure; if a breach affects your rights, we will notify you and the Office of the Data Protection Commissioner as required by law.

Under the Data Protection Act, 2019 you have the right to:

• be informed about how your data is used;
• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• ask us to delete your data — step-by-step instructions are on our data use and deletion page;
• object to or restrict certain processing;
• receive a copy of your data in a portable format;
• withdraw consent at any time, without affecting processing already carried out.

You can exercise most of these directly in your profile settings, or write to info@whrdhub.org. We respond within 30 days. You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

We use cookies and similar local storage that are strictly necessary to keep you signed in, remember your accessibility settings, and secure the service. We do not use advertising cookies. You can clear or block cookies in your browser, but parts of the platform will not work if you do.

The platform is intended for adults. We do not knowingly create accounts for anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. We will post the new version on this page and update the date above. If the changes are significant, we will notify account holders by email or an in-platform notice.

Write to info@whrdhub.org, call +254 797 538 183, or post to P.O. Box 7403 – 00100, Nairobi, Kenya. See also our Terms of Use.