Privacy Policy

1 Who We Are (Data Controller)

FutureLife Foundation (“we,” “us,” “our”) is headquartered in Nairobi, Kenya. We are registered as a Data Controller with the Office of the Data Protection Commissioner (ODPC). For any data-protection enquiry, contact us at info@futurelifefoundation.org.

2 Categories of Data We Collect

• Individual applicants — full name, national ID/passport, contact details, biographical data, CVs, portfolios, and bank or mobile-money details for disbursement.
• Institutions & partners — registration details, tax profiles, and personal data of authorised focal points.
• Donors & funders — legal identity documents, source-of-funds declarations, and transactional history.

3 Lawful Bases for Processing

• Explicit consent at submission.
• Performance of a contract — evaluating applications, onboarding, grant and partnership administration.
• Legal obligation — tax reporting to KRA and AML verification.
• Legitimate interests — ecosystem security, funding audits and platform improvement.

4 Cross-Border Data Transfers

Under Sections 48–49 of the Kenya Data Protection Act and ODPC guidance, data may be processed outside Kenya only in jurisdictions with demonstrated adequacy, using Standard Contractual Clauses and approved Data Transfer Agreements, in line with the Malabo Convention.

5 Data Retention & Safeguards

• Approved applications are retained for the partnership lifecycle plus statutory archiving periods.
• Unsuccessful applications are retained for approximately two years for future cohort consideration, then destroyed or anonymised.
• Security measures include encryption, restricted access controls and regular vulnerability assessments.

6 Your Rights as a Data Subject

7 Complaints and Enforcement

Complaints may be lodged with the Office of the Data Protection Commissioner via www.odpc.go.ke. We encourage contacting our internal Data Protection Officer first for swift resolution at info@futurelifefoundation.org.