Privacy Policy

1. Introduction and Commitment

Midhill Health Foundation ("the Foundation", "we", "us", or "our") is a registered charitable nonprofit organization based in Nairobi, Kenya, operating in partnership with Midhill Hospital. We are dedicated to providing accessible healthcare, medical camps, maternal health initiatives, youth sports empowerment, and community wellness programs across underserved populations.

We recognize that your privacy is a fundamental human right. Whether you are a donor contributing to our medical missions, a community member participating in free health screenings, a volunteer offering your time, or a visitor exploring our website, we treat all personal and health-related data with rigorous confidentiality, respect, and high security standards.

2. Information We Collect

We may collect information in the following contexts:

• Donor Information: When you make a financial donation via M-Pesa, bank transfer, or other channels, we collect details such as your name, mobile phone number, transaction reference code, email address, and donation amount for receipting, auditing, and tax compliance purposes.
• Community Health and Outreach Data: During community medical camps, health checkups, or wellness outreaches, qualified clinical professionals collect limited diagnostic metrics (such as blood pressure, glucose readings, BMI, or triage notes). This data is gathered strictly with patient consent for clinical care, referral to Midhill Hospital, and anonymized public health statistical reporting.
• Volunteer and Job Applicants: When applying to volunteer or work with us, we collect your name, contact details, curriculum vitae, professional licensing status, and area of expertise to match you with appropriate medical or community tasks.
• Website and Digital Inquiries: When you submit questions via our contact form, newsletter signup, or email, we collect your name, email address, and message contents to respond to your inquiry.

3. How We Use Your Information

Midhill Health Foundation will never sell, rent, lease, or trade your personal or health data to commercial third parties. We use your data strictly for legitimate charitable and healthcare objectives:

4. Health Data Confidentiality & Medical Privacy

We hold health metrics, clinical screening results, and medical notes to the highest ethical benchmarks of medical doctor-patient confidentiality. Health screening records gathered during community outreaches (such as CWC Riara, St. John, Muslim Community, and Medical Camps) are stored securely and accessed exclusively by licensed clinical staff.

Photographs taken during community outreaches and published on our website or social media respect individual dignity. We obtain verbal or written community consent prior to photographing events, and we never attach sensitive medical diagnoses to identifiable photographs.

5. Payment and Financial Security

Financial contributions made to our official Safaricom Lipa na M-Pesa Paybill (Paybill: 303030, Account: RFZG#) are processed directly by Safaricom and authorized banking networks under Kenyan financial regulations. Midhill Health Foundation does not store credit card PINs, mobile banking passwords, or private banking access credentials.

6. Your Rights Under Kenya Data Protection Act 2019

Under the provisions of the Kenya Data Protection Act, you have the right to:

• Be informed of the use to which your personal data is put
• Access any personal data in our custody regarding you
• Request correction of false, misleading, or outdated personal information
• Request the deletion or erasure of your personal data where there is no legal requirement for retention
• Object to the processing of all or part of your personal data

7. Contact Our Data Governance Team

If you have questions about this Privacy Policy, wish to exercise your legal data rights, or want to update your donor record, please contact us directly: