Skip to content
Hali Yetu Collective

Privacy Policy

Last updated: October 8, 2026

1. About this Privacy Policy

The Hali Yetu Collective (“Hali Yetu”) is a collaborative initiative bringing together independent organizations working to deepen understanding, dialogue and public engagement on the present and future of East Africa.

This website is operated and administered on behalf of the Hali Yetu Collective by the Society for International Development (SID), a recognized legal entity registered in Italy, with its registered office at via degli Etruschi 7, Rome, 00185. SID also operates in Kenya through its registered office in Nairobi.

This Privacy Policy explains how personal data collected through the Hali Yetu website and associated digital services is collected, used, stored, shared, and protected, as well as the rights available to individuals whose personal data we process.

SID is committed to handling personal data lawfully, fairly, and transparently, and only for legitimate purposes.

2. Who is responsible for your personal data?

Unless otherwise expressly indicated, the Society for International Development (SID) is the data controller for personal data collected via this website.

As a data controller, SID determines the purposes for which personal data is collected and the means by which it is processed.

SID operates the Hali Yetu website on behalf of the Hali Yetu Collective. The organizations participating in the Collective remain independent and do not, solely by virtue of their participation in Hali Yetu, become controllers of personal data collected through this website.

When a particular activity involves another participating organization, partner, or service provider acting as a separate or joint controller, this will be communicated where appropriate.

Questions concerning the processing of personal data may be directed to:

Society for International Development (SID)
via degli Etruschi 7, Rome, 00185, Italy
Email SID (Rome)

Kenya Office
Society for International Development
P.O. Box 2404-00100
Nairobi, Kenya
Email SID (Nairobi)

3. Data protection framework

SID processes personal data in accordance with applicable data-protection and privacy laws.

This includes, where applicable:

  • Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR);
  • applicable Italian data-protection legislation;
  • the Kenya Data Protection Act 2019 and applicable regulations; and
  • other data-protection requirements that may apply to specific processing activities or individuals.

When different laws apply to specific processing activities, SID will respect the rights and protections that apply under the relevant law.

4. Personal data we may collect

The personal data we collect depends on how you interact with Hali Yetu and with the website.

It may include:

Information you provide directly, such as your name, email address, organization, professional role, country or location, areas of interest, and information contained in messages or inquiries you send to us.

Newsletter and communications information, including your contact details, communication preferences, and, where available, information about your interactions with the communications we send.

Event information, such as details provided when registering for webinars, dialogues, workshops, or other Hali Yetu activities.

Contributor information, including information provided by authors, researchers, interviewees, speakers, reviewers, partners, and other contributors in connection with Hali Yetu publications and activities.

Technical information, which may include your IP address, browser type, device information, operating system, referring website, pages visited, approximate location derived from your IP address, and similar technical information generated when you use the website.

Cookie and analytics information, where permitted and as described in our Cookie Policy and in our consent settings.

We seek to collect only personal data that is reasonably necessary for the purposes for which it is processed.

5. How we collect personal data

We may collect personal data:

  • directly from you when you contact us, subscribe to communications, register for an event, complete a form, submit material, or otherwise interact with Hali Yetu;
  • automatically when you use the website, via cookies and similar technologies, subject to applicable consent requirements;
  • through participating organizations or partners where information is lawfully shared for a Hali Yetu activity;
  • through publicly available sources, where appropriate, for research, communications, or engagement; and
  • through service providers that support our website, communications, events, or other digital activities.

When personal data is obtained from another source, we will handle it in accordance with applicable data-protection requirements.

6. Why we use personal data

We may process personal data for purposes including:

  • operating, maintaining and securing the Hali Yetu website;
  • responding to enquiries and correspondence;
  • providing publications, newsletters, and other communications requested by users;
  • administering subscriptions and communication preferences;
  • organizing and administering events, dialogues and other activities;
  • communicating with authors, researchers, reviewers, speakers, partners, and contributors;
  • publishing authorized information about authors, contributors, speakers, and participating organizations;
  • understanding how the website and Hali Yetu materials are used;
  • improving the accessibility, relevance, and effectiveness of our website and communications;
  • maintaining appropriate records of Hali Yetu’s activities;
  • protecting the security and integrity of our systems; and
  • complying with legal and regulatory obligations.

We will not use personal data for purposes incompatible with those for which it was collected unless permitted or required by law.

7. Our legal bases for processing

Where the GDPR applies, SID processes personal data only when there is an appropriate legal basis.

Depending on the circumstances, this may include:

Consent — where you have given us permission to process your personal data for a specific purpose, such as receiving certain communications or accepting non-essential cookies.

Legitimate interests — where processing is reasonably necessary for SID’s or Hali Yetu’s legitimate organizational, research, communications, or operational interests and those interests are not overridden by your rights and interests.

Contractual necessity — where processing is necessary to enter into or perform an agreement with you.

Legal obligation — where processing is necessary to comply with a legal or regulatory requirement.

When we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Where Kenyan data-protection law applies, SID will ensure that personal data is processed on a lawful basis applicable under Kenyan law and in accordance with the principles and requirements established under Kenyan law.

8. Newsletters and communications

When you subscribe to Hali Yetu newsletters, updates, or other communications, we will use the contact information you provide for that purpose.

Where required by applicable law, these communications will be sent based on your consent.

You may unsubscribe from electronic communications at any time by using the unsubscribe option included in the relevant communication or by contacting us.

We may retain limited information necessary to record an unsubscribe request and to ensure that the preference continues to be honored.

9. Events and registrations

When you register for a Hali Yetu event, dialogue, webinar, or other activity, we may collect information necessary to administer your participation.

Where an event is organized jointly with another Hali Yetu participating organization or partner and personal data will be shared with that organization, we will provide appropriate information about that arrangement where necessary.

Photographs, video, or audio recordings may be made during certain Hali Yetu activities. When this occurs, participants will be informed, and consent will be sought where required by applicable law or by the nature of the recording.

10. Cookies and analytics

The website may use cookies and similar technologies to enable essential website functionality, maintain security, remember user preferences, and understand how visitors interact with the website.

Non-essential cookies, including analytics and third-party tracking technologies, will be used only in accordance with applicable consent requirements.

Users will be provided with appropriate means to accept, reject, or manage non-essential cookies.

To understand how the website is used, we use Plausible Analytics, a privacy-focused analytics service provided by a company incorporated in Estonia. Plausible does not use cookies or other persistent identifiers and does not track visitors across websites or devices. It records information such as the pages visited, referring websites, browser, operating system and device type, and approximate location (country, region and city), and presents the results to us in aggregate form. To count visits, it derives a temporary identifier from the visitor’s IP address and browser details; this identifier changes every day, and the IP address and browser details themselves are not stored. Analytics data is processed and stored in the European Union. We process this data on the basis of our legitimate interests in understanding and improving the website.

Further information about the cookies and technologies used on the website is available in our Cookie Policy and in the website’s cookie preference settings.

11. Embedded and third-party services

The Hali Yetu website may include content or functionality from third parties, such as embedded video, audio, maps, social media content, event platforms, or other digital services.

Interaction with such services may result in information being transmitted to the relevant third party. Those organizations may process personal data under their own privacy policies and, in some circumstances, may act as independent data controllers.

Where required, third-party content that involves non-essential tracking or data collection will not be activated until the user has given consent.

12. Who we may share personal data with

SID does not sell personal data.

We may share personal data, where reasonably necessary, with:

  • service providers supporting website hosting, maintenance, security, communications, mailing lists, analytics, or event administration;
  • participating Hali Yetu organizations, where necessary, for a specific Collective activity;
  • consultants, contractors and other persons working on behalf of SID or Hali Yetu;
  • event or programme partners where appropriate and properly disclosed;
  • professional advisers; and
  • public authorities or other persons when disclosure is required by law or reasonably necessary to protect legal rights or security.

When service providers process personal data on our behalf, we seek to ensure that appropriate contractual and data-protection arrangements are in place.

Participation in the Hali Yetu Collective does not, by itself, give participating organizations unrestricted access to personal data collected through the website.

13. International transfers

Hali Yetu is a regional initiative, and SID operates internationally, including through its establishments in Italy and Kenya. Some personal data may therefore be accessed, stored, or processed across national borders.

Personal data may also be processed by technology and service providers located in other countries.

When personal data is transferred internationally, SID will take appropriate measures to ensure that the transfer complies with applicable data-protection law.

Where the GDPR applies, this may include transfers to countries recognized as providing an adequate level of protection or the use of appropriate safeguards, such as approved contractual arrangements.

Where the Kenya Data Protection Act applies, international transfers will be made in accordance with applicable Kenyan requirements governing the transfer of personal data outside Kenya.

Further information about safeguards applicable to a particular transfer may be requested using the contact details provided in this Policy.

14. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including any applicable legal, accounting, reporting, archival, or organizational requirements.

Different retention periods may apply to various categories of information.

For example, mailing-list information may generally be retained while a person remains subscribed; event information may be retained for a reasonable period after an event for administrative and reporting purposes; and contractual or financial records may be retained for the periods required by applicable law.

When personal data is no longer required, it will be deleted, anonymized, or otherwise securely disposed of, subject to legitimate archival or legal requirements.

15. Security

SID takes reasonable technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

These measures are reviewed as appropriate, given the nature of the information processed, available technology, and relevant risks.

No internet-based service can, however, guarantee absolute security.

16. Your rights

Depending on the law applicable to you and the circumstances of the processing, you may have rights regarding your personal data, including the right to:

  • obtain information about how your personal data is processed;
  • request access to personal data held about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of personal data in appropriate circumstances;
  • request restriction of processing;
  • object to certain processing;
  • withdraw consent where processing is based on consent;
  • request portability of certain personal data; and
  • file a complaint with an appropriate data-protection authority.

These rights are subject to the conditions and exceptions established by applicable law and therefore may not apply in every circumstance.

To exercise a privacy right, please contact us. We may need to verify your identity before responding to your request.

17. Complaints and supervisory authorities

We encourage you to contact SID first if you have a concern about how your personal data has been handled so we can work to resolve the matter.

Where the GDPR applies, you also have the right to lodge a complaint with the competent data-protection supervisory authority, including the Garante per la protezione dei dati personali in Italy, where applicable.

When Kenyan data-protection law applies, complaints may be filed with the Office of the Data Protection Commissioner (ODPC) of Kenya.

These rights are not affected by contacting SID first.

18. Children

The Hali Yetu website is intended primarily for a general and professional audience and is not designed to collect personal data from children.

When a Hali Yetu activity specifically involves children or young people, appropriate privacy, consent, and safeguarding arrangements will be established for that activity in accordance with applicable law.

If we become aware that personal data concerning a child has been collected in circumstances requiring parental or guardian consent but without the necessary authorization, we will take appropriate steps to address the matter.

19. Research, publications and public-interest content

Hali Yetu’s work includes research, analysis, journalism, interviews, public dialogue, and documentation of matters of public interest.

Personal information may therefore appear in Hali Yetu publications or multimedia content, particularly regarding authors, interviewees, public figures, speakers, and individuals who have agreed to participate in Hali Yetu activities.

Such processing will be undertaken in accordance with applicable data-protection law, freedom of expression, research and journalistic considerations, the public interest, and the rights and reasonable expectations of the individuals concerned.

Where appropriate, information may be anonymized or pseudonymized to protect individuals or communities.

20. Links to other websites

The website may contain links to websites and services operated by other organizations.

SID is not responsible for the privacy practices of external websites. Users are encouraged to review the privacy information provided by those organizations when leaving the Hali Yetu website.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, technologies, service providers, or legal requirements.

The current version will be published on this website, and the date of the latest revision will appear at the beginning of the Policy.

When a change materially affects how we process personal data, we will take reasonable steps to notify affected individuals, as required.

22. Contact us

Questions, requests, or concerns regarding this Privacy Policy or SID’s processing of personal data may be directed to:

Society for International Development (SID)
via degli Etruschi 7, Rome, 00185, Italy
Email SID (Rome)

Kenya Office
Society for International Development
P.O. Box 2404-00100
Nairobi, Kenya
Email SID (Nairobi)