What we collect
Inclusive Education Hub for Africa respects your privacy. We collect only the information needed to run the website, the members' forum and our newsletter.
- Membership application and account: your name, email address, password (stored only in scrambled, hashed form), country, organization, sector, whether you join as an individual or an organization, and your short statement of why you want to join. Name, email, country, sector and the statement are required to review your application; the rest is optional.
- Profile and settings: anything you add to your profile (bio, photo, preferred language), whether you appear in the member directory, and your notification choices.
- Forum activity: discussions, replies, files, messages to other members, community memberships and reports you make, so the forum can work and be moderated.
- Sign-in and security: one-time sign-in codes, password-reset links, "keep me signed in" tokens, and the date you last signed in. Codes and links are stored in scrambled form and expire automatically.
- Newsletter: your email address, the page you signed up on, the date and the internet (IP) address used, as a record of your consent.
- Contact form: your name, email address, message, your consent and the IP address used, so we can reply and prevent abuse.
- Accessibility and language settings: your display preferences are stored only in your own browser and are never sent to us or used for profiling or advertising.
- Resource downloads: we count how often each resource is downloaded. These counts do not identify you.
Who is responsible for your data
The Inclusive Education Hub for Africa, coordinated by the Regional Hub Africa secretariat in Nairobi, Kenya, is the data controller for the information described on this page, and processes it in line with the Kenya Data Protection Act, 2019. You can reach us at info@iehubforafrica.org for any privacy question or request.
Our legal basis for processing
- Membership and the forum: processing is necessary to provide the membership service you applied for, and you agree to it when you register.
- Security, moderation and safeguarding: our legitimate interest in keeping the platform safe, free of spam and abuse, and well moderated.
- Newsletter and contact form: your consent, which you can withdraw at any time (every newsletter has an unsubscribe link).
- Sensitive information you choose to share: your explicit consent, given when you choose to publish it (see below).
Sensitive personal data, including disability
We never ask you to tell us about your health, disability, ethnicity, religion or other sensitive personal data, and you do not have to share it to join. Because this is a disability-inclusion community, some members choose to mention their own disability or experience in their profile, posts or messages. If you do, you are choosing to make that information visible to other members, and we process it only to show it where you posted it. You can edit or delete it at any time. Please do not share sensitive information about other people, especially children, without their consent; our safeguarding policy applies to stories and images.
How we use it
We use the information we collect to review membership applications, provide the forum and its notifications, secure accounts, moderate content, reply to enquiries, and send the newsletter to people who asked for it. Applications are read and decided by a person, a moderator; we do not make automated decisions or build profiles about you. We do not sell or rent personal data to anyone.
Third parties we work with
A small number of specialist providers process data on our behalf so the platform can work: our web hosting provider (which also sends our emails), Cloudflare Turnstile for spam and bot protection, GTranslate for the optional on-page language switcher, and CookieYes for cookie consent. We only share what each provider needs to do its job, and we do not permit them to use your data for their own purposes. Some of these providers operate outside Kenya; where your data is processed abroad, we rely on safeguards required by the Kenya Data Protection Act, 2019, such as the provider's contractual data protection commitments.
Cookies
We use a session cookie to keep you signed in while you browse, an optional "keep me signed in" cookie that lasts 30 days, and a cookie that remembers your cookie choices. We do not use advertising cookies. See our cookie policy for the full list.
Children's data
This platform is intended for adult practitioners, policymakers and advocates, and is not designed for children. Where members share stories or images that include children, our safeguarding policy sets out the consent and protection standards that apply.
How long we keep it
- Member accounts and profiles: for as long as your account is open. Ask us to close it and we will delete your personal details.
- Forum posts: while your account is open, or until you or a moderator delete them.
- Applications that are not approved: kept as a closed record so we can answer questions about the decision. Ask us and we will delete it.
- Sign-in codes and links: sign-in codes expire after 10 minutes and password-reset links after 1 hour; "keep me signed in" lasts 30 days; signed-in sessions end after 2 hours of inactivity or 12 hours at most.
- Newsletter: until you unsubscribe. We keep a record of the unsubscription so we don't email you again.
- Contact form enquiries: for as long as needed to deal with your enquiry. Ask us and we will delete it.
Your rights
Under the Kenya Data Protection Act, 2019, and similar laws elsewhere, you have the right to be told how your data is used, to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict certain processing, to receive a copy of it, and to withdraw consent you gave earlier. You can update most of your details yourself from your profile. To exercise any right, email info@iehubforafrica.org or use the contact form. If you are unhappy with our response, you can complain to the Office of the Data Protection Commissioner in Kenya (odpc.go.ke) or the data protection authority where you live.
Changes to this policy
We will update this page if what we collect or how we use it changes, and note the date below. This policy was last reviewed on 1 October 2026.