Twende Green Planet (“we”, “us”) respects the privacy of everyone who uses this website, registers for Blue Carbon Action 2026 or supports its programmes. This notice explains what personal data is collected, why, who receives it and the rights of the people concerned. It is issued in accordance with the Data Protection Act, 2019 of Kenya. It was last updated in October 2026.
1. The data we collect
- Registration and account data: name, e-mail address, telephone number, organisation, and the days, seats or packages selected. A guest account is opened on completion of a registration or payment so that badges, tickets and receipts are kept together.
- Order and payment data: the items ordered, the amount, the method used and its status. For M-Pesa we receive the telephone number and the transaction reference; for cards we receive a reference and the outcome from the payment provider. We do not receive or store card numbers. Where a bank transfer is made, any proof of payment uploaded is stored securely and used only to confirm the payment.
- Forms and enquiries: the details and message provided through the contact, partnership, participation, volunteer, job application and similar forms.
- Assistant conversations: the questions put to Green, the website assistant, which are kept to improve the answers given.
- Newsletter: the e-mail address of subscribers who have opted in.
- Technical data: IP address, browser type, pages visited and approximate location, collected for security and to understand how the site is used. For people who are signed in, this activity is linked to their account, so that the Secretariat can see who is using the website.
2. How the data is used
We use personal data to issue confirmations, badges, tickets and receipts; to process and verify payments; to respond to enquiries and applications; to assess partnership and funding proposals; to arrange seating, protocol and security for the event; to send programme updates to those who have opted in; to keep the website secure; and to comply with legal and accounting obligations. We do not sell, rent or trade personal data.
3. The basis for processing
We process data where it is necessary to carry out a registration or an order requested by the person concerned, where consent has been given (for example, newsletters), where the law requires it, and where it is in the legitimate interest of the organisation to keep the website secure and to improve it, provided that interest is not overridden by the rights of the person concerned.
4. Who receives the data
- Payment providers: Safaricom (M-Pesa) and Paystack (cards) receive the details needed to complete a payment. Their own notices apply to the data they hold.
- Service providers: our website hosting and e-mail delivery providers process data on our behalf and under our instructions.
- Event partners and authorities: where required for the safe running of the event, limited information about attendees, such as names and organisations of delegations, may be shared with the venue, the county authorities and protocol and security officers.
- Public acknowledgement: supporters and partners may be named in the Impact Report and on the website unless they ask to remain anonymous; the payment form provides this option.
5. Transfers outside Kenya
Some of our providers may process data outside Kenya. Where that occurs, we take steps to ensure that the data remains protected in accordance with the Data Protection Act, 2019.
6. Retention
Data is kept only for as long as it is needed for the purposes above. Order and payment records are retained for the period required by Kenyan accounting and tax law. Enquiry and application data is kept only as long as necessary to deal with the matter. Newsletter data is kept until the subscriber withdraws consent.
7. Security
The website is served over an encrypted connection. Access to personal data is limited to authorised staff, uploaded proofs of payment are stored privately, and payment prompts and card payments are handled by the payment providers rather than on this website.
8. Your rights
Under the Data Protection Act, 2019 you have the right to be informed about the use of your data, to access it, to object to its processing, to have inaccurate data corrected, to have data deleted where there is no lawful reason to keep it, and to withdraw consent at any time. To exercise any of these rights, please write to info@twende.green. We will respond within the period set by law. If you are not satisfied with the response, you may complain to the Office of the Data Protection Commissioner of Kenya.
9. Cookies
The cookies used by this website are described in the Cookie policy.
10. Changes to this notice
Any material change will be published on this page, with the date of the update shown above.