Legal information

Murigu Foundation ("we", "us") collects only the personal data needed to operate this site and our programs: contact details you submit (name, email, phone), donation references, volunteer applications, and basic analytics (pages viewed, language chosen, approximate region).

We do not sell personal data. We share it only with service providers required to deliver the site, accept donations, and send confirmations (e.g. our hosting, authentication, and email-delivery vendors), each under a data-processing agreement.

Cookies and local storage we use:

• Strictly necessary: session, language preference (murigu_lang), CSRF.
• Analytics: aggregated, anonymised usage to improve the site. No third-party advertising cookies.

You can clear cookies and local storage at any time from your browser settings. Most browsers also offer a "Do Not Track" or Global Privacy Control signal — we honour it.

By using this site you agree not to misuse it (no automated scraping that overloads our services, no attempts to bypass authentication, no uploading unlawful content). Photographs and stories are © Murigu Foundation or used with permission; please request before reusing.

The site is provided "as is" without warranties. To the maximum extent permitted by law, we are not liable for indirect or consequential losses arising from use of the site. Nothing in these terms limits any liability that cannot be limited under applicable law (e.g. for fraud or wilful misconduct).

We process personal data in compliance with the Kenya Data Protection Act, 2019 and the regulations of the Office of the Data Protection Commissioner (ODPC). You have the right to access, correct, object to processing, and request erasure of your data. Lodge complaints with the ODPC at odpc.go.ke.

Murigu Foundation is a community-based welfare organisation operating in Kiambu County. We are working toward registration under the Public Benefit Organisations (PBO) Act, 2013. Until registration is finalised, donations are not tax-deductible in Kenya and we do not issue KRA tax-exemption receipts. We are not a bank or licensed financial institution; M-Pesa Paybill 400200 (Account: MURIGU) is operated for charitable contributions only.

Mobile-money transactions are subject to Safaricom's terms and applicable transaction fees. We are not responsible for telecom charges.

If you are in the EU, EEA, or UK, our processing is governed by the EU General Data Protection Regulation (GDPR) and the UK GDPR. Our lawful bases are: consent (newsletters, optional cookies), contract (donation receipts), legal obligation (financial records), and legitimate interest (security and aggregated analytics).

You have the right to:

• access a copy of your personal data;
• rectify inaccurate data and request erasure;
• restrict or object to processing, including direct marketing;
• data portability where processing is automated and based on consent or contract;
• withdraw consent at any time without affecting prior lawful processing;
• lodge a complaint with your national supervisory authority (e.g. ICO in the UK, CNIL in France, BfDI in Germany).

Personal data may be transferred to and stored in Kenya and the United States, where our hosting and email-delivery providers operate. Such transfers rely on the European Commission's Standard Contractual Clauses (2021/914) and equivalent UK International Data Transfer Agreement, supplemented by encryption in transit and at rest.

We do not have an EU/UK representative; please contact our data lead below.

Tax status: Murigu Foundation is a Kenya-based charitable initiative. We are not a US 501(c)(3) organisation, and donations are not tax-deductible as charitable contributions on US federal income tax returns. US donors who require deductibility may consider donating through a qualified US "friends of" intermediary or donor-advised fund — please contact us before sending a large gift.

State charitable solicitation: We do not currently register as a charitable solicitor in any US state. If we conduct active solicitation in your state in future, we will register as required (e.g. New York, California, Florida). Residents of certain states have the right to obtain financial and registration information from their state attorney general or charities bureau.

California (CCPA/CPRA): California residents have the right to know what personal information we collect, to delete it, to correct it, to limit use of sensitive information, and to opt out of "sharing" for cross-context behavioural advertising. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

Children's privacy (COPPA): The site is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has submitted information, contact us and we will delete it.

Other state laws: Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive privacy statutes may exercise the access, correction, deletion, and opt-out rights granted under their state law by contacting us.

100% of every donation goes directly to programmes supporting the elderly we serve. The Mr. John Kamau Murigu family personally underwrites 100% of the foundation's administrative expenses — staff stipends, office overhead, banking and payment-processing fees, travel, software, audits, and governance costs. Donor funds are never used for overhead.

Donations are voluntary and non-refundable except where required by law or where a transaction was clearly made in error (e.g. duplicate charge, wrong amount). Refund requests must be made within 30 days of the transaction by emailing hello@murigufoundation.org with the M-Pesa code or card receipt.

We publish an annual summary of how donations are used and the family's administrative underwriting. Restricted gifts (e.g. "FOOD", "WATER", "BUS") are spent only on the designated programme.

Detailed list of cookies and local storage keys used on this site:

• murigu_lang — remembers your selected language. 1 year.
• murigu.lang (localStorage) — same purpose, fallback when cookies are blocked.
• Authentication cookies set by our authentication provider when you sign in to admin.

We aim to meet WCAG 2.1 AA. If you encounter an accessibility barrier, email us and we will work to address it within a reasonable time.

Email privacy@murigufoundation.org or write to: Murigu Foundation, Privacy Office, Kiambu County, Kenya.

We aim to respond to data-rights requests within 30 days.