Privacy Policy

1. Introduction

Welcome to the MC Mutiso Official Platform. We respect your privacy and are committed to protecting your personal data in compliance with the Data Protection Act (2019) of Kenya and applicable international standards. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights.

2. The Data We Collect About You

We may collect, use, store and transfer different kinds of personal data about you, including:

• Identity and Contact Data: Includes first name, last name, email address, and social media identifiers (when you use Google OAuth or subscribe to our newsletter).
• Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, and operating system.
• Usage Data: Information about how you navigate and interact with our stories, events, and platform features.
• Marketing and Communications Data: Your preferences in receiving email updates, notifications, and event broadcasting from us.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

• To manage your event bookings and story notifications.
• To deliver relevant website content to you via our Broadcast Mailing system.
• To use data analytics to improve our website, services, marketing, and user experience.

4. Cookies and Web Beacons

We use cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies as defined in our initial cookie consent prompt.

5. Data Security & Third-Party Access

We have put in place appropriate security measures (including secure database infrastructure authenticated via Supabase) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We may share your data with strictly vetted third-party service providers (such as Google for OAuth authentication and Resend for email dispatching) purely to facilitate our business operations. We do not sell your personal data.

6. Your Legal Rights

Under the Kenyan Data Protection Act, you have rights regarding your personal data, including the right to request access, correction, erasure (the "right to be forgotten"), restriction, or transfer of your personal data. You may easily unsubscribe from our mailing lists at any time.

If you wish to exercise any of these rights, please contact us at mcmutiso@gmail.com.