What this website does with your information.

Scaling Sustainable Industries Centre LTD (“SSI”, “we”) is a privately registered Kenyan company based in Nairobi, and is the data controller for this website.

We handle personal information in line with Kenya’s Data Protection Act 2019. Where a visitor is in the European Economic Area or the United Kingdom, we also apply the standards of the General Data Protection Regulation — most of the people who contact us are, and we would rather hold one standard than two.

The contact form asks for what the subject is about, your name, your email address and your message. Your organisation and your phone number are optional — the form works without them.

When you send it, that message is emailed to us and nothing else happens to it. It is not saved to a database, because this website does not have one. The reply address on our end is set to yours, so answering is just a reply in an ordinary email thread.

We use it to reply to you and nothing else. No newsletter, no list. The legal basis is our legitimate interest in answering people who contact us, and — where you are writing about a partnership or funding — taking steps at your request before entering into an agreement.

If our mail server is unreachable at the moment you press send, the submission is written to our own server’s log instead of being lost silently, so that we can still answer you. Those log entries are deleted on the same routine cycle as everything else in the log.

To stop the contact form being used for bulk spam, the site counts recent submissions per network address. That address is held in memory for at most one minute and is never written to disk by the site itself.

Separately, the web server that delivers these pages keeps standard access logs — the network address, the time, the page requested and the browser’s self-description. Every web server does this; it is what allows us to see that the site is working and to investigate abuse. The logs are rotated and deleted automatically on a short cycle, and we do not use them to build a picture of individual visitors.

This site sets no cookies. It runs no analytics — not Google Analytics, not any alternative — and there is no advertising, no tracking pixel, no social media button and no embedded third-party content anywhere on it.

The typefaces are served from our own server rather than from Google’s, so visiting this site does not tell anyone else that you visited it. There is nothing here to consent to, which is why you are not being asked to.

The WhatsApp button opens a conversation in WhatsApp, which is operated by Meta under its own privacy terms. The policy paper linked from Our Work is a PDF hosted here, so downloading it involves nobody but us. The Partners page links out to our consortium partners’ own websites; once you are there, their privacy terms apply and not ours.

Two suppliers necessarily handle your message in the course of delivering it: the company that hosts our email, and the company that hosts this website. They process it only to run those services for us, and under contract.

Beyond that, nobody. We do not sell personal information, we do not share it with partner organisations, and we do not pass it to advertisers or data brokers. Our programme partners have no access to anything you send through this site.

We are a Kenyan company and the people who write to us are often in Europe, so a message you send will be read in Kenya. Where that involves a transfer out of the EEA or the UK, it is a transfer necessary to respond to your own request.

Correspondence is kept for as long as the conversation is a live one and for a reasonable period afterwards, in the same way as any other business correspondence — a partnership discussion may resume a year later, and losing the thread would serve nobody. When it is no longer useful, it is deleted. If you ask us to delete it sooner, we will.

You can ask us what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it, or ask for a copy of it. You do not need a reason and there is no charge.

Ask through the contact form or on WhatsApp, and we will answer within 30 days. We publish no email address anywhere on this site, deliberately — an address on a public page is harvested within days, and the form reaches the same people.

If you think we have handled your information badly, you are entitled to complain to Kenya’s Office of the Data Protection Commissioner, or to the data protection authority in your own country if you are in the EEA or the UK. We would rather you told us first and gave us the chance to put it right.

This site is addressed to funders, partner organisations and businesses. It is not directed at children and we do not knowingly collect information from them.

If what the site does changes, this page changes with it, and the date below changes too. We do not keep an archive of previous versions; if it matters to you what this page said on a particular date, ask us and we will tell you.

Last updated: 28 August 2026.