PRIVACY
POLICY
Tukijituma is a Citi and Girl Effect initiative. The application process is run by Girl Effect.
Girl Effect collects personal data (“data”) from you to manage the selection process. This will include evaluating your application, communicating with you, conducting verification checks, and managing the process.
When we collect your data, we ensure that it is kept securely and we respect your privacy at all times. We will also only ever use your data for legitimate business or operational purposes connected to the application and selection process, and we will take reasonable steps to keep it secure and confidential.
We’re committed to providing you with this security and privacy. We’re also required to do this under various laws (such as the Data Protection Act 2019) applicable to Girl Effect.
DATA WE WILL COLLECT FROM YOU
When you participate in the onboarding process, you will be asked to provide:
- Email address;
- Telephone number;
- Date of Birth;
- County and Location;
- Education details;
- Information about digital access/connectivity;
- Access to social media platforms;
- Areas of interest and skills;
- Work experience; and
- Emergency contact details
If you are successful and qualify for Tuki-Jituma you will be asked to sign up to the Progress Tracker via a chatbot. You will be asked to provide:
- Name
- Age
- Gender; and
- The course you are taking.
INFORMATION WE COLLECT BECAUSE YOU ARE USING OUR WEBSITE
When you use the website, we use Cookies, which may also collect further information about your location (for example, your village or town). We can only use these types of cookies with your consent. (A cookie is a small text file that is downloaded onto your computer or smartphone when you access a website. It allows the website to recognize your device and store some information about your preferences or past actions. We use Cookies to keep track of things such as how many people from your general location have used the site. You can turn off cookies through your browser settings if you wish, but it can limit how our website works, making it less user-friendly.
LEGAL BASIS
We rely on your consent to process your data for the purposes of this initiative. If we use your data for research purposes, we will anonymize it so that it will not be linked to you.
USE OF YOUR DATA
Your data may be shared with team members, advisors, service providers or partners who are directly involved in reviewing or administering the application process. All staff have signed agreements confirming they will keep your data confidential and who are required to follow very strict guidelines around privacy and security. Our staff are carefully selected and trained.
WHERE WE PROCESS DATA
We process and store data on servers in Europe, meaning there is an international transfer of data to those servers. It is necessary for us to hold our data in the EU and we will ensure that any transfer of personal data is necessary and that it does not impact on your rights and freedoms. Any processing in Europe needs to meet the high standards of GDPR, so we have ensured that appropriate security is in place.
HOW LONG WE KEEP YOUR PERSONAL DATA
We will only retain your personal data for as long as we need it and will not be retained for any longer than is necessary for the lawful purposes for which it was collected and processed. We may, in some cases, keep personal data for longer to establish, exercise, or defend our legal rights. In addition, personal data may be securely archived with restricted access and other appropriate safeguards where there is a need to continue to retain it. While we retain your personal data, we will ensure that it is kept securely and protected from loss, misuse or unauthorised access and disclosure. Once the retention period is reached, we will delete your personal data.
YOUR RIGHTS
We will only retain your personal data for as long as we need it and will not be retained for any longer than is necessary for the lawful purposes for which it was collected and processed. We may, in some cases, keep personal data for longer to establish, exercise, or defend our legal rights. In addition, personal data may be securely archived with restricted access and other appropriate safeguards where there is a need to continue to retain it. While we retain your personal data, we will ensure that it is kept securely and protected from loss, misuse or unauthorised access and disclosure. Once the retention period is reached, we will delete your personal data.
INFORMATION WE COLLECT BECAUSE YOU ARE USING OUR WEBSITE
When you use the website, we use Cookies, which may also collect further information about your location (for example, your village or town). We can only use these types of cookies with your consent. (A cookie is a small text file that is downloaded onto your computer or smartphone when you access a website. It allows the website to recognize your device and store some information about your preferences or past actions. We use Cookies to keep track of things such as how many people from your general location have used the site. You can turn off cookies through your browser settings if you wish, but it can limit how our website works, making it less user-friendly.
COMPLAINTS
If you are at all unhappy with the way we manage your data, you can always contact us on dataprotection.kenya@girleffect.org and we will do our best to respond to you as soon as we can, (and anyway, within a month).
June 2026