Godly Wisdom Ministry (including direct and indirect subsidiaries) respects your privacy and is committed to protecting your personal data. This privacy policy (and any other documents referred to on it) (Privacy Policy) sets out the basis on which any personal data we collect from you, that you provide to us, or that is otherwise made available to us will be processed by us.

This policy will inform you as to how we look after your personal data when you partner with us, use our services, or visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By accepting our terms and conditions you are accepting and consenting to the practices described in this policy.

This Privacy Policy may be amended or updated from time to time to reflect changes in our practices with respect to the processing of Personal Data, or changes in applicable law. It is important that you read this Privacy Policy together with any other privacy policy or processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.

For the purposes of this Privacy Policy, the following definitions apply:

• "Applicable Law" means the Constitution of the Republic of Kenya, all Acts of Parliament including regulations, rules, guidelines, guidance noted issued pursuant to the any Act of Parliament, legislative and regulatory requirements, and codes of practice applicable to the processing of personal data and/or applicable to a data controller or data processor as may be amended from time to time;
• "Personal Data" means any information relating to an identified or identifiable natural person (hereinafter "Data Subject"). For clarity, an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of such a natural person;
• "Controller" means the natural or legal person, authority, organization or other agency that makes decisions individually or together with other parties regarding the purposes and means for processing Personal Data;
• "Godly Wisdom Ministry" ("Godly Wisdom") includes all the subsidiaries and affiliates of Godly Wisdom Ministry (hereafter referred to as "we", "us" or "our");
• "Processing" means an operation or activity or set of operations or activities performed on personal data whether or not by automated means;
• "Processor" is a natural or legal person, authority, organization or other agency that processes Personal Data on behalf of the Controller.
• "Sub-processor" is the contractual partner of the Processor, engaged to carry out specific processing activities on behalf of the Processor and/or Controller.
• "Third Party" means a natural or legal person, public authority, agency or body other than the Data Subject, Controller, Processor, Sub-processor, and persons who, under the direct authority of the Controller, Processor or Sub-processor, are authorized to process Personal Data;
• "Website" means the website of Godly Wisdom Ministry which is accessible through https://www.godly-wisdom.org/;
• "Online and Mobile Payment Services" means the services we offer on our online and mobile platforms.

In addition to the definitions in clause 1.1, unless the context requires otherwise:

• definitions of terms in our general terms and conditions shall be applicable to this policy;
• the singular shall include the plural and vice versa;
• a reference to any one gender, whether masculine, feminine or neuter, includes the other two;
• all the headings and sub-headings in this policy are for convenience only and are not to be taken into account for the purposes of interpreting it.

We may collect, use, store and transfer different kinds of Personal Data about you which we have grouped as follows:

• Identity data which includes name, username or similar identifier, Identity card/Passport number, PIN number, photo, marital status, symbol, fingerprints, race, pregnancy status, nationality, ethnic or social origin, colour, age, title, date of birth and gender, and any other similar information;
• Contact data which includes billing address, postal address, physical address, email address and telephone numbers;
• Financial data which includes any bank account details, card payment details and other electronic or non-electronic payment details;
• Transaction data which includes details about payments to and from you and other details of services you have acquired from us;
• Technical data which includes internet protocol (IP) address, your login identity data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our systems;
• Profile data which includes your profile identification information, purchases or orders made by you, your interests, preferences, feedback and survey responses;
• Usage data which includes information about how you use our website, and services;
• Marketing and communications data which includes your preferences in receiving marketing information from us and our third parties and your communication preferences;

We also collect, use and share aggregated data such as statistical or demographic data. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.

We will collect and process data about you from the following sources:

• Information you give us: This is information about you that you give us by filling in forms that we give to you or by corresponding with us by phone, e-mail or otherwise. We use different methods to collect data from and about you including through direct interactions. This includes the personal data you provide when you:
  • apply for our services;
  • subscribe to our services or publications;
  • request marketing information to be sent to you;
  • enter a competition, promotion or survey; or
  • give us feedback or contact us.
• Information we collect about you: With regard to each of your user visits to our Website and your use of the Online and Mobile Payment Services we will automatically collect the following information:
  • technical information, including the Internet protocol (IP) address used to connect your computer or mobile phone to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
  • information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page and any phone number used to call our numbers;
• Information we receive from other sources: we receive your Personal Data from third parties who provide it to us. We will receive Personal Data about you from various third parties to whom you have consented and public sources including but not limited to: companies registry, lands registry and other government registries; service providers we interact or integrate with now or in future; Integrated Personal Registration Systems, Kenya Revenue Authority and the National Transport and Safety Authority database.
  • we may collect information about you from other publicly accessible sources not listed above. We may also collect information about you from trusted partners, not listed above, who provide us with information about potential clients of our services;
  • we receive your Personal Data from third parties, where you purchase any of our services through such third parties; and
  • we collect Personal Data that you manifestly choose to make public, including via social media (e.g., we may collect information from your social media profile(s), to the extent that you choose to make your profile publicly visible.
• Our Website may include links to third-party websites, plug-ins, cookies and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites or influence the data collected and are not responsible for their privacy policies. When you leave our Website, we encourage you to read the privacy policy of every website you visit and understand your rights therein.
• It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. In case you wish to correct or update your Personal Data that we hold, you may do so by writing to us at admin@godly-wisdom.org

We will only use your Personal Data where we have your consent or a legal basis to process the same. Most commonly, we will use your Personal Data in the following circumstances:

• Where we need to perform the agreement we are about to enter into or have entered into with you;
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests; and/or
• Where we need to comply with a legal obligation.

We have set out below, in a table format, a description of all the ways we plan to use your Personal Data, and the basis we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data.

We may collect special categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, political opinions, trade union membership, information about your health, criminal convictions and offenses and biometric data.)

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We have established the following personal data control mechanisms:

• Promotional offers from us: We may use your identity, contact, technical, usage and profile data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services, and offers may be relevant for you. You will receive marketing communications from us if you have requested information from us or purchased services from us and you have not opted out of receiving that marketing.
• Third-party marketing: We may share your Personal Data with any third party for marketing purposes where we believe that the marketing information from such third parties will be relevant to you. We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
• Opting out: You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a service purchase, service experience or other transactions.

We may place electronic “cookies” in the browser files of your computer when you access our Website. Cookies are pieces of information that our website transfers to your computer to enable our systems to recognize your browser and to tailor the information on our Website to your interests. For example, if you previously visited our Website and inquired about particular services, cookies enable us to present information tailored to your account and/or those particular interests the next time you visit the Website.

We, or our third-party service providers or business partners, may place cookies on your computer’s hard drive that can be matched to other personal information we maintain about you to pre-populate certain online forms for your convenience. We also use cookies to analyze visitors’ use of our Website, helping us understand which areas are most useful and popular to plan improvements and updates accordingly.

Many web browsers are automatically set to accept cookies. You may change your computer’s web browser settings to either reject cookies or notify you when a cookie is about to be placed on your computer. Please note that rejecting cookies while visiting our Website may result in certain parts of the Website not operating as efficiently as if cookies were allowed.

We will only use your Personal Data and special category data for the purposes for which we collected it, as outlined in this Privacy Policy or as communicated to you during the collection of the data.

If we need to use your Personal Data for an unrelated purpose, we will notify you and seek your consent where necessary. We will explain the legal basis that allows us to process your data for the new purpose.

Please note that we may process your Personal Data without your knowledge or consent if this is required or permitted by law, such as for compliance with legal obligations or to protect your vital interests or those of another person.

We may disclose your Personal Data to other entities within the affiliates of Godly Wisdom Ministry for legitimate business purposes, such as providing services to you and operating our Website and systems, in accordance with applicable law.

In addition, we may disclose your Personal Data to:

• Government authorities, including law enforcement and regulators, where required by law or to comply with legal obligations;
• Financial institutions through which your transactions are processed, such as banks or payment service providers;
• Third parties with accruing legal obligations, such as trustees, executors, guarantors, persons holding a power of attorney to operate an account on your behalf, or joint account holders;
• Third parties involved in a business transfer, such as entities to whom we may choose to sell, transfer, or merge parts of our business, rights, duties, or assets. If a change happens to our business, the new owners may use your Personal Data in the same manner as outlined in this Privacy Policy;
• Third-party service providers acting as processors, including professional advisers such as lawyers, bankers, auditors, and those providing consultancy, banking, legal, insurance, and accounting services.

We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.

We may need to transfer or store your Personal Data in another jurisdiction to fulfill a legal obligation, pursue our legitimate interests, or protect the public interest, such as when working with international service providers or affiliates.

If the other jurisdiction does not have the same level of protection for Personal Data as Kenya, we will put in place appropriate safeguards, such as contractual commitments, to ensure your data is adequately protected in accordance with applicable laws.

We ensure your Personal Data is protected by requiring all our related companies to follow the same data protection rules when processing your Personal Data. Where third parties are based in other jurisdictions, their processing of your Personal Data may involve a transfer of data to their jurisdictions.

We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your Personal Data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We will only retain your Personal Data for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy any legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your Personal Data, and whether we can achieve those purposes through other means, as well as applicable legal and regulatory requirements.

By law, we are required to retain basic information about our clients (including contact, identity, financial, and transaction data) for a minimum of seven years after they cease being clients. Our internal policies, as amended from time to time, may require us to retain client data for a longer period.

In some circumstances, we may anonymize your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Subject to legal and contractual exceptions, you have rights under applicable laws in relation to your Personal Data. These include:

If you wish to exercise any of these rights, please contact us using the details provided in the "How to Contact Us" section.

We may modify or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. A copy of the current policy can be downloaded from our Website at https://www.godly-wisdom.org/.

Where changes to this Privacy Policy will have a fundamental impact on the nature of the processing of your Personal Data or your rights, we will notify you in advance through appropriate channels, such as email or notifications on our Website.

By enrolling for our services or entering into any contractual arrangements with us, you confirm that you have read, understood, and agreed to be bound by the terms and conditions of this Privacy Policy.

If you would like to contact us on any topics in this privacy policy, you can: