Privacy Policy

Last Updated: August 2026

Gracious Steps School respects your privacy and is committed to handling personal information responsibly. This Privacy Policy explains how we may collect, use, store, and protect information when you visit our website, contact us, make a donation, submit a form, or otherwise interact with us.

1. Information We May Collect

Depending on how you interact with our website or services, we may collect information such as:

• Your name

• Email address

• Phone number

• Information submitted through contact or enquiry forms

• Donation amount and donation category

• Transaction or payment reference information

• Information you voluntarily provide when communicating with us

• Technical information collected through website technologies, such as IP address, browser type, device information, and website usage information

We only seek to collect information that is relevant to the purpose for which it is needed.

2. Payment Information

When you make a donation, your payment may be processed through a third-party payment provider.

Gracious Steps School may receive information such as your name, donation amount, payment status, and transaction reference. We do not intend to store sensitive payment credentials unless this is specifically required and securely handled through an appropriate payment system.

Payment providers may collect and process information according to their own privacy policies and terms.

3. How We Use Your Information

We may use your information to:

• Process and administer donations

• Confirm or communicate about donations

• Respond to enquiries and messages

• Communicate with you about our programmes, activities, or opportunities where appropriate

• Improve our website and services

• Maintain administrative and financial records

• Protect our website and prevent misuse or fraudulent activity

• Meet applicable legal, regulatory, or reporting obligations

We will not use your personal information for purposes that are incompatible with the reason it was collected without an appropriate basis for doing so.

4. When We May Share Information

We do not sell personal information to third parties.

We may share information only where reasonably necessary, including with:

• Payment processors and payment service providers

• Website hosting, technology, and service providers that help us operate our website

• Professional advisers or service providers where necessary

• Government authorities or other parties where required by applicable law

Where third parties process personal information on our behalf, we seek to use appropriate arrangements and safeguards where applicable.

5. How We Protect Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no website, internet transmission, or electronic storage system can be guaranteed to be completely secure. You should therefore take appropriate care when sharing information online.

6. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including administrative, financial, legal, reporting, and operational purposes.

The length of time information is retained may depend on the type of information and applicable legal requirements.

7. Cookies and Website Technologies

Our website may use cookies or similar technologies to help the website function, understand how visitors use the website, and improve the user experience.

You may be able to control or disable cookies through your browser settings. Please note that disabling certain cookies may affect how some parts of the website function.

8. Children’s Privacy

Gracious Steps School works directly with children in its educational programmes. We take the privacy and protection of children seriously.

Our public website is primarily intended to provide information about the school, its work, and opportunities to support it. We do not knowingly seek to collect unnecessary personal information directly from children through our donation or general contact forms.

Where information relating to children is processed as part of school activities, we will seek to handle it responsibly and in accordance with applicable requirements and appropriate safeguards.

9. Your Privacy Rights

Subject to applicable law, you may have rights regarding your personal information, including the right to request information about the personal data we hold about you, request correction of inaccurate information, or raise concerns about how your information is being processed.

To make a privacy-related request, please contact us using the details below.

10. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of those websites before providing personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, website, or legal requirements. The latest version will be published on this page with the updated revision date.

12. Contact Us

For questions about this Privacy Policy or how we handle personal information, please contact Gracious Steps School.

Phone: +254 721 223 332
Alternative Phone: +254 714 661 662
WhatsApp: +254 115 403 470

Location: Off Kabiria Road, next to Kivuli Centre, along Kabiria Road, Riruta, Dagoretti South, Nairobi City County, Kenya.