Privacy Policy

This Privacy Policy explains how Design Innovation Program, also referred to as DIP, collects, uses, stores, and shares personal information when you use our website, apply to programmes, register for events, download resources, subscribe to updates, contact us, or engage with us as a partner, speaker, mentor, donor, sponsor, founder, student, or community member.

We are based in Nairobi, Kenya, and we aim to handle personal information in line with applicable data protection law, including the Kenya Data Protection Act, 2019, where it applies to our activities.

We collect information you choose to provide, such as your name, email address, phone number, organisation, role, website, message content, partnership interests, programme application details, event registration details, speaker information, resource requests, newsletter preferences, photos, testimonials, and other materials you submit.

We may also collect limited technical information connected to website operation and security, such as browser type, device information, IP address, pages visited, timestamps, form validation events, and admin session information.

Most information comes directly from you through our website forms, email, event interactions, programme applications, newsletter signups, partner conversations, and public social media interactions.

Some submissions may be collected through third-party tools linked from our site, including Google Forms, calendar tools, email tools, social media platforms, video platforms, podcast platforms, or other services we use to run programmes and community activities.

We use personal information to respond to enquiries, review applications, manage programme selection, run events, communicate with participants and partners, send newsletters, coordinate speakers and mentors, publish approved stories, maintain resources, protect the website, administer event content, and improve DIP services.

We may also use information for internal planning, reporting, impact measurement, legal compliance, fraud prevention, security, record keeping, and enforcing our Terms and Conditions.

Depending on the context, we process personal information because you have given consent, because processing is necessary to provide a service or take steps you requested, because we have a legitimate interest in running and improving DIP, because we need to comply with legal duties, or because processing is necessary for security and administration.

Where we rely on consent, you may withdraw it at any time by contacting us or using any unsubscribe option provided in our communications.

We do not sell personal information. We may share information with service providers and collaborators who help us operate the website, host data, manage forms, send email, review applications, organise events, process payments where applicable, publish approved content, or deliver programmes.

These may include hosting providers, Supabase, Google Forms or Google services, email and newsletter services, social media platforms, event platforms, partner institutions, mentors, speakers, sponsors, donors, professional advisers, and public authorities where required by law.

Some third-party services we use may process or store information outside Kenya. When this happens, we rely on the provider terms, safeguards, contractual protections, consent where appropriate, and other lawful bases available for international processing or transfer.

You should also review the privacy notices of third-party services you use through our links, since those services control their own data practices.

We keep personal information only for as long as reasonably needed for the purpose it was collected, including programme administration, event records, communication history, partnership management, legal compliance, audit, dispute resolution, and security.

Application and programme records may be kept for impact reporting and alumni engagement. Newsletter information is kept until you unsubscribe or ask us to remove it, unless we need to retain limited records for legal or administrative reasons.

Subject to applicable law, you may have the right to be informed about how your personal information is used, access your personal information, correct inaccurate or misleading information, request deletion or erasure, object to processing, withdraw consent, request portability, and raise a complaint with the Office of the Data Protection Commissioner in Kenya.

To exercise a privacy right, contact us using the email address below. We may need to verify your identity before responding.

Some DIP activities may involve students or young founders. If a programme, event, or application involves a person under 18, we may require consent from a parent, guardian, school, university, or authorised adult, depending on the activity and the information collected.

We do not knowingly collect personal information from children in a way that is inappropriate for the purpose of our programmes.

We use reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration, and disclosure.

No website, form, or online service can be guaranteed to be completely secure. Please avoid sending sensitive information unless it is necessary for the relevant programme, event, or enquiry.

We may update this Privacy Policy as our website, programmes, tools, and legal requirements change. The latest version will be posted on this page with the updated date.

Questions or requests about privacy can be sent to team@designinnovationprogram.com.