1. Who we are
MazingiraShield ("we", "us", "our") is a satellite- and drone-based reforestation monitoring and carbon accounting platform, operated from Nairobi, Kenya, serving county governments, NGOs, conservancies, and corporate CSR programmes. This policy explains what personal data we collect through our website, dashboard, and field survey tool, and how we use it.
2. What this policy covers
This policy applies to mazingirashield.co.ke, the MazingiraShield dashboard (for county, NGO, and corporate accounts), and the field survey mobile tool used by officers on the ground. It doesn't cover third-party sites we link to.
3. Information we collect
Account information — name, email address, organization, role, and login credentials, handled through our authentication provider.
Site and monitoring data — site boundaries and GPS coordinates, per-tree GPS coordinates captured by drone survey or manual entry, drone and satellite imagery of sites, species and survival data logged by field officers, and survey notes and timestamps.
Beneficiary and payout data — where a customer organization uses the Service to track payouts to caretakers, we may process the caretaker's name, contact details, payment details (for example, an M-Pesa number), and payout history.
Device and usage data — log data, browser or device type, IP address, and general usage patterns within the dashboard.
Site photography — drone and ground-survey imagery, which may incidentally include people, vehicles, or property near a planting site.
4. How we use this information
- To operate the dashboard, field survey tool, and reporting features
- To calculate survival rates, vegetation health status, and carbon estimates
- To process and reconcile beneficiary payouts on behalf of a customer organization
- To generate exportable reports (PDF or CSV) for a customer's own use
- To communicate with account holders about their account or changes to the Service
- To maintain, secure, and improve the platform
5. Legal basis for processing
We process personal data where it's necessary to deliver a service a customer organization has signed up for, where we have a legitimate interest in keeping the platform secure and working well, and with consent where that's the appropriate basis — for example, when collecting a beneficiary's payout details.
6. Who we share data with
We use third-party infrastructure and service providers to run MazingiraShield, including cloud hosting and authentication providers (data may be stored outside Kenya as a result), satellite imagery and species-identification providers who receive only the specific imagery or query needed for that feature, and payment processors used to facilitate beneficiary payouts. Staff within a customer organization can see the site, survey, and payout data associated with their own account. We do not sell personal data to third parties.
7. Data retention
We keep site, survey, and payout records for as long as an account is active, and for a further period after an account closes where needed for audit, legal, or funder-reporting purposes. After that, data is deleted or anonymized, unless a longer period is required by law.
8. Your rights
Under Kenya's Data Protection Act, 2019, you have the right to be informed about how your data is used, to access the personal data we hold about you, to request correction of inaccurate data, to request deletion, to object to certain processing, and to lodge a complaint with the Office of the Data Protection Commissioner. To exercise any of these rights, contact us at [privacy email].
9. Security
We use encrypted storage and transport, access controls, and authenticated access to protect data on the platform. No system is completely secure, and we can't guarantee absolute protection against every possible risk.
10. Children's data
MazingiraShield is a business and government tool, not directed at children, and we don't knowingly collect personal data from children.
11. International transfers
Because we rely on global cloud infrastructure, personal data may be processed on servers outside Kenya. Where that happens, we take reasonable steps to ensure the provider offers an adequate level of protection for that data.
12. Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the most recent revision, and we'll notify account holders of material changes.
13. Contact
Questions about this policy can be sent to [privacy email], MazingiraShield, Nairobi, Kenya.