Legal · Privacy

Privacy Policy

Warrior Afya Network ("we", "us", "our") is committed to protecting the privacy of everyone who interacts with our website at warriorwellness.com. This policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over your data.

By using our website or submitting any form, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Warrior Afya Network is a community-led non-profit organisation based in Nairobi, Kenya. We provide holistic support programs for cancer patients, survivors, caregivers, and the broader community. For data-related enquiries, contact us at info@warriorwellness.org.

2. Data We Collect

We collect personal data only when you voluntarily provide it through our website forms. The data collected depends on which form you use:

Program Registration (Join a Program)

• Full name, email address, phone number
• Age and marital status
• Role (patient, caregiver, medical professional, etc.)
• Program of interest
• Any additional information you choose to share

Partnership Enquiries

• Full name or organisation name
• Email address and phone number
• Profession or organisation type
• Partnership area of interest
• Supporting message

Donation Leads

• Full name and email address
• Intended donation amount and preferred payment method
• Optional dedication or message

Contact Messages

• Full name, email address
• Subject and message content

Newsletter Signup

• Email address only

Technical Data (Automatic)

• IP address (logged server-side for spam prevention)
• Browser type and device info (via standard HTTP headers — not stored)

3. Why We Collect Your Data

We use your personal data only for the purposes for which it was submitted:

• Program registration — to process your application, contact you about sessions, and manage attendance.
• Partnership enquiries — to respond to collaboration requests and facilitate partnerships.
• Donation leads — to acknowledge your intended gift and send payment instructions or receipts.
• Contact messages — to respond to your enquiry.
• Newsletter — to send you updates about our programs, events, and impact. You may unsubscribe at any time.
• IP logging — to detect and prevent automated spam submissions.

We do not use your data for marketing unrelated to Warrior Afya Network, profiling, automated decision-making, or sale to third parties.

4. Legal Basis for Processing

Under the Kenya Data Protection Act 2019, we process your data on the following bases:

• Consent — you explicitly tick the consent checkbox before submitting any form.
• Legitimate interest — to prevent fraud and ensure the security of our systems.
• Contract performance — to fulfil program registrations and partnership arrangements you initiate.

5. How We Store Your Data

Your data is stored in MongoDB Atlas, a cloud database service hosted on servers located in the United States (AWS infrastructure). MongoDB Atlas is certified to ISO 27001 and SOC 2 standards and encrypts data at rest and in transit.

Our website is hosted on Vercel (serverless infrastructure, US-based). Email notifications triggered by form submissions are delivered via Resend (email API service). These processors are bound by data processing agreements consistent with applicable data protection law.

6. Data Retention

We retain your personal data for a maximum of 3 years from the date of submission, unless you request deletion sooner or we are legally required to retain records longer. Newsletter subscriptions are retained until you unsubscribe or request deletion.

7. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request permanent deletion of your data (see Section 8 below).
• Withdrawal of consent — withdraw consent at any time without affecting prior processing.
• Objection — object to certain types of processing.
• Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email info@warriorwellness.org. We will respond within 30 days.

8. Request Data Deletion

Use the form below to permanently delete all personal data associated with your email address from our database. This action is irreversible. You will receive a confirmation notification after the deletion is processed.

9. Cookies

Our website does not use tracking cookies, analytics cookies, or advertising cookies. We do not use Google Analytics, Facebook Pixel, or similar third-party tracking tools. The only cookies that may be set are strictly necessary session cookies by our hosting provider (Vercel) for security purposes.

10. Children's Privacy

Our programs serve people of all ages including minors, with parental consent. We do not knowingly collect personal data from children under the age of 13 without verifiable parental consent. If you believe a child has submitted data without consent, contact us immediately at info@warriorwellness.org.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the revised policy.

12. Contact

For any questions, concerns, or requests related to this Privacy Policy or your personal data:

• Email: info@warriorwellness.org
• Phone: +254 716 404 435
• Address: Nairobi CBD, Kenya