Limitless Talk Organization works with communities on matters people do not always want made public. Some of the people we work with would face real harm if their involvement became known. We take that seriously, and this policy sets out exactly what we collect, why, and what we will never do with it.

This policy covers both our website at limitlesstalk.org and the information we handle through our programmes and community work.

Who we are

Limitless Talk Organization is a registered community-based organisation in Kenya, based in [TOWN], Kakamega County. For the purposes of the Data Protection Act, 2019, we are the data controller for the information described in this policy.

Registration number: [CBO REGISTRATION NUMBER]
Email: info@limitlesstalk.org
Website: limitlesstalk.org

Our commitments

Information we collect through this website

Comments

When you leave a comment, we collect what you type into the comment form, plus your IP address and browser information. This helps us detect spam. If you use Gravatar, an anonymised version of your email address may be sent to that service to retrieve your profile picture, which then appears publicly beside your comment.

Contact and enquiry forms

If you contact us through the website, we receive whatever you send — typically your name, email address and message. We use it to reply to you and nothing else.

Cookies

Cookies are small files stored by your browser. On this site:

• If you leave a comment, you may choose to have your name, email and website saved so you do not retype them. These last one year.
• Logging in sets cookies that remember your session and display preferences. Login cookies last two days, or two weeks if you select “Remember Me”. Display preference cookies last a year.
• Editing or publishing a post stores a cookie holding only the post ID. It expires after one day.

You can block or delete cookies through your browser settings. Parts of the site may not work normally if you do.

Content embedded from other sites

Pages here may include videos, maps or other content hosted elsewhere. Those services can collect information about you, set their own cookies and track your interaction with that content, exactly as if you had visited their site directly. Their privacy policies apply, not ours.

Analytics

[IF YOU USE GOOGLE ANALYTICS OR SIMILAR, DESCRIBE IT HERE AND NAME THE SERVICE. IF YOU USE NOTHING, REPLACE THIS PARAGRAPH WITH: “We do not use third-party analytics on this website.”]

Information we collect through our programmes

This is the part that matters most, and the part a standard website policy does not cover.

When you take part in a dialogue, training session, outreach or other activity, we may record your name, contact details, ward or sub-county, and details of your participation. We collect this for three reasons only: to run the activity, to follow up with you afterwards, and to report accurately to whoever funded the work.

Where we report to funders or publish results, we use aggregate figures — how many people attended, in how many locations. We do not share participant lists, names or contact details with funders unless you have specifically agreed to it.

Sensitive information

Some of our work touches on health, including sexual and reproductive health. The Data Protection Act treats health information as sensitive, and so do we.

We do not require anyone to disclose their health status to take part in our activities. Where someone chooses to share such information, we keep it confidential, do not record it against their name unless there is a clear reason and their agreement, and do not disclose it to family members, employers, community leaders or anyone else.

Photographs and recordings

We ask before photographing anyone. We then ask separately whether that photograph may be published. A person can agree to one and refuse the other, and many do.

Where we hold photographs that were taken with permission but without permission to publish, those photographs stay unpublished. This is why some of our project pages carry no images at all.

If you have previously agreed to a photograph being used and want that withdrawn, contact us and we will remove it from our website and materials.

Who we share information with

We share personal information only in these situations:

• Service providers who host our website, send our email, or filter spam. They act on our instructions and cannot use your information for their own purposes.
• Funders and partners, in aggregate and anonymised form, unless you have specifically agreed to more.
• Health or protection services, where you have asked us to refer you and agreed to that referral.
• Where the law requires it — for example a court order. If this happens and we are permitted to tell you, we will.

If you request a password reset on this website, your IP address is included in the reset email.

How long we keep information

• Website comments and their metadata are kept indefinitely so follow-up comments can be recognised automatically.
• Enquiries sent through the site are kept for [PERIOD, e.g. two years] and then deleted.
• Programme records are kept for as long as the funding agreement requires, usually [PERIOD, e.g. five years after the project closes], then securely destroyed.
• Registered user accounts hold whatever the user entered in their profile. Users can see, edit or delete this at any time, apart from their username.

How we protect information

Participant records are kept in [DESCRIBE: locked storage / password-protected files / restricted-access drive]. Only staff who need access to run a programme have it. Our website uses an encrypted connection.

No system is perfectly secure. If information we hold is exposed in a way likely to cause you harm, we will tell you and notify the Office of the Data Protection Commissioner as the law requires.

Your rights

Under the Data Protection Act, 2019, you have the right to:

• be told what information we hold about you and why;
• receive a copy of it;
• have inaccurate information corrected;
• ask us to delete information we no longer have good reason to keep;
• object to particular uses of your information; and
• withdraw consent you previously gave, including consent to use your photograph.

To exercise any of these, email info@limitlesstalk.org. We will respond within [NUMBER] days. We may need to confirm your identity first, so that nobody else can obtain your information by pretending to be you.

Some information we are obliged to retain for legal, audit or safeguarding reasons, and we will explain if that applies.

Children

Where our work involves anyone under 18, we seek consent from a parent or guardian as well as from the young person. We do not publish photographs or identifying details of children. Our website is not directed at children and we do not knowingly collect their information through it.

Changes to this policy

We will update this page when our practices change, and we will change the date at the top. Significant changes affecting how we handle programme information will be communicated directly to the people concerned.