Privacy Policy

Datascience Impact Hub ("DIH", "we", "us", "our") is a pan-African research and training organization established in Kenya, with activities across Africa and Europe. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit datasciencehub.org or otherwise interact with us.

For the purposes of the Kenya Data Protection Act, 2019 ("KDPA") and the EU General Data Protection Regulation 2016/679 ("GDPR"), Datascience Impact Hub is the data controller of personal data described in this Policy. Questions and rights requests can be sent to info@datascience.co.ke.

This Policy applies to personal data we process about visitors to our website, subscribers to our communications, applicants to our programs, research participants, partners, and event attendees. It does not apply to third-party websites we link to.

• Contact information you provide voluntarily — name, email address, organization, role, country, and the contents of messages you send us.
• Program and event data — registration details, professional background, and any information you submit through application forms.
• Newsletter and subscription data — email address and preferences, where you opt in.
• Technical data — IP address, device and browser type, referring URL, and pages viewed. We currently do not run third-party analytics or advertising trackers, but if we add them in the future we will update this Policy and, where required, request your consent.
• Cookies — only strictly necessary cookies are used at this time to run the site. Any non-essential cookies will be enabled only with your consent.

We do not knowingly collect personal data from children under 18 without parental or guardian consent.

We process personal data only where we have a lawful basis under the KDPA and the GDPR:

• Consent — for newsletter subscriptions and any non-essential cookies or marketing communications.
• Contract — to deliver training, programs, certifications, or services you have registered for.
• Legitimate interests — to respond to enquiries, secure and improve our website, conduct research, and develop our programs, where these interests are not overridden by your rights.
• Legal obligation — to comply with applicable laws, including tax, accounting, and data protection regulations.
• Public interest / research — for academic and policy research, subject to appropriate safeguards including, where feasible, anonymization or pseudonymization.

We do not sell personal data. We share it only with:

• Vetted service providers (e.g. hosting, email delivery) acting as our processors under written agreements.
• Research, training, or program partners — only with your knowledge, and only the data necessary.
• Regulators, courts, or law-enforcement authorities where legally required.
• Successors in the event of a merger, acquisition, or reorganization, under equivalent protections.

Because we operate across Africa and Europe, personal data may be transferred outside its country of origin — including between Kenya and the European Economic Area. Where we transfer data internationally we rely on lawful transfer mechanisms, such as adequacy decisions, Standard Contractual Clauses, or your explicit consent, and we apply appropriate technical and organizational safeguards.

We retain personal data only for as long as necessary for the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce our agreements. Enquiry emails are typically retained for up to 24 months; program records for the duration of the engagement plus a reasonable archival period; newsletter data until you unsubscribe.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure ("right to be forgotten") where the legal basis allows.
• Object to or restrict processing, including for direct marketing.
• Request data portability of data you provided to us.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with a supervisory authority — in Kenya, the Office of the Data Protection Commissioner (ODPC); in the EU/EEA, your local data protection authority.

To exercise these rights, contact us at info@datascience.co.ke. We will respond within the timeframes required by applicable law (typically within 30 days).

We apply industry-standard technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction — including encryption in transit, access controls, and regular review of our practices. No method of transmission over the internet is fully secure, and we cannot guarantee absolute security.

We currently use only strictly necessary cookies required for the basic functioning of the website. Should we introduce analytics, performance, or marketing cookies in the future, we will request your consent through a cookie banner and update this Policy.

We may update this Policy from time to time. Material changes will be announced on this page and, where appropriate, by email. The "Last updated" date at the top reflects the latest revision.

Datascience Impact Hub
Email: info@datascience.co.ke
Website: datasciencehub.org