Privacy Policy.

Bright Future Horizon ("we," "us," "our") is a non-governmental organization operating at bfutureh.org (or brightfuturehorizon.org). This Privacy Policy explains what personal information we collect through our website, how we use it, who we share it with, and the choices you have.

If you have questions about this policy or how your data is handled, contact us at b.futurehorizon@gmail.com.

We collect different information depending on how you interact with our platform:

When you make a donation:

• Full name, email address
• Donation amount and currency
• Payment provider selection (e.g. M-Pesa, PayPal, Card) and any transaction reference associated with your payment
• We do not store your card numbers, M-Pesa PIN, or other payment credentials — these are handled directly by our payment providers.

When you apply to volunteer:

• First and last name, email, phone number
• Your CV/resume (uploaded file)
• Area of interest, availability, and any message you provide

When you apply to become a sponsor:

• Country of residence, occupation
• Your stated reason for wanting to sponsor
• How you heard about us (optional)
• Preferred contact method and phone number (if provided)

When you contact us:

• Name, email, subject, and message content

Automatically collected information:

• Basic technical data such as IP address, browser type, and general usage analytics, collected via our hosting and analytics providers (see Section 4).

We do not knowingly collect information from children. Our platform is intended for use by adults (donors, volunteers, and sponsors) acting on behalf of, or in support of, children in our programs — not for use by children themselves.

We use the information we collect to:

• Process and record donations, and communicate about their status
• Review and respond to volunteer applications, including sharing CVs internally with staff involved in recruitment
• Review sponsor applications and verify sponsor eligibility
• Respond to inquiries submitted through our contact form
• Send confirmation emails and status updates related to the above (e.g. application received, application status changed, donation acknowledgment)
• Maintain the security, integrity, and proper functioning of our website (e.g. rate-limiting to prevent abuse, fraud prevention)
• Comply with legal or regulatory obligations, including those under Kenyan law

We do not sell your personal information. We do not use your information for third-party advertising.

We share information with a limited set of service providers who help us operate the platform, strictly for the purposes described above:

• Supabase — our database and backend infrastructure provider, which stores application data, donation records, and uploaded files (e.g. CVs) securely.
• Resend — our email delivery provider, used to send account confirmations, application status updates, and notifications.
• Cloudflare — our hosting and content-delivery provider, which also provides basic security and performance services (e.g. bot protection).
• Payment processors (e.g. M-Pesa, PayPal, or card processing partners) — used to process donations. These providers have their own privacy policies governing how they handle your payment information.

We do not share your personal information with third parties for their own marketing purposes.

We may disclose information if required to do so by law, or to protect the rights, safety, or property of Bright Future Horizon, our beneficiaries, or the public.

We retain personal information for as long as necessary to fulfill the purposes described in this policy — for example:

• Volunteer application data and CVs are retained for the duration of the recruitment/review process and for a reasonable period afterward for record-keeping, unless you request earlier deletion.
• Donation records are retained as required for financial and accounting record-keeping.
• Sponsor application data is retained for the duration of an active or pending sponsorship relationship.

You may request that we delete your personal information at any time, subject to any legal or accounting obligations that require us to retain certain records (see Section 6).

Depending on your location, you may have rights under applicable data protection law (including Kenya's Data Protection Act, 2019) to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent (e.g. optional communications)

To exercise any of these rights, contact us at b.futurehorizon@gmail.com. We will respond within a reasonable time and in accordance with applicable law.

We take reasonable technical and organizational measures to protect your information, including access controls, encrypted storage, and secure transmission (HTTPS). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our website may use essential cookies required for core functionality (such as maintaining your login session and security tokens). If you add analytics or marketing cookies later, describe them here and update this section accordingly.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Continued use of our website after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at: