Your information, and how we look after it.

Who we are

Kisasa FC is a community football club based in Nairobi, Kenya. When you give us your information through this site, the club is the data controller, which means we are responsible for how that information is handled. You can reach us about anything in this policy at info@kisasa.football.

The information we collect

We collect the information you choose to give us through the site’s forms, plus a small amount your browser sends automatically.

From the forms:

• Pitch In (offering support): your name, email, phone number, an organisation if you give one, any note you add, and whether you have asked to stay anonymous.
• Tryouts (registering interest in a trial): the player’s name, date of birth, school, and preferred position, and whether they live in the area; and the parent or guardian’s name, email, and phone number.
• The Backroom (volunteering or working with us): your name, email, phone number, the role you are interested in, your availability, and a short note on your experience.
• Contact form: your name, email, the topic, and your message.
• Attachment applications: the details and background you send when applying for an attachment or internship with the club.

Automatically: the IP address you submit from and your browser’s user-agent, which is the standard line every browser sends with a request. We use one WordPress session cookie that the site needs to work. We do not run analytics, advertising trackers, or any other cookies.

Sensitive information

Some of what we collect is treated as sensitive personal information under the Act. In particular, the Tryouts form links a child’s details to a parent or guardian’s details, which counts as family data. We only collect this with the guardian’s explicit consent, and we handle it with extra care, as set out under Children and young people below.

Why we use your information, and our legal basis

We use your information only for the reason you gave it to us:

• to reply to you and follow up on what you submitted, whether a trial, an offer of support, a volunteer enquiry, a message, or an application;
• to arrange and run trials, club activities, and matches;
• to keep an honest record of who has been in touch and what was agreed.

Under Section 30 of the Data Protection Act, our lawful bases are your consent, which you give by submitting a form and which a guardian gives for a child’s data, and our legitimate interest in running the club and responding to people who contact us. Where the law requires it, we also process information to meet a legal obligation.

Giving us your information is voluntary. If you choose not to, we may not be able to arrange a trial, act on your offer, or reply to you. We do not use your information for marketing, and we will not send you unrelated messages.

Children and young people

Many of the players we hear from are under 18, and our trials are aimed at under-16s. We take this seriously.

• A parent or guardian must complete or authorise the Tryouts form. By submitting it, the guardian consents to us holding the player’s and their own details for the purpose of arranging a trial.
• We process a child’s information only in ways that serve the child’s best interests, as the Act requires.
• We direct our communication to the parent or guardian, not to the child.
• At matches and club events we may take photographs or video for club communications. For anyone under 18 we rely on guardian consent, and you can tell us at any time if you do not want a child’s image used.
• A parent or guardian can withdraw consent and ask us to delete a child’s details at any time, by emailing info@kisasa.football.

Who we share it with

Your information stays inside Kisasa FC. The people who can see it are the club staff who need it to do their job, which today is a small number and will grow as the club grows. We share information outside the club only in limited cases:

• with the service providers who run our website and email, and only so they can provide that service;
• with the league or football bodies we play under, where taking part requires it, for example registering a player;
• with the authorities, if the law requires us to.

We never sell or rent your information to anyone.

Where your information is stored

Our website and email are run by service providers whose servers may be located outside Kenya. Where your information is transferred outside the country, we take reasonable steps to see that it is handled with the protection the Data Protection Act expects.

How long we keep it

We keep your information only as long as we need it.

• Details tied to an offer of support, a volunteer enquiry, or a message are kept while we act on them and for as long as we need an honest record.
• For trials, we delete an unsuccessful applicant’s details within a reasonable period after the trial process ends.
• We are setting up an automatic ninety-day deletion of IP addresses and browser details once a submission has been dealt with, since we do not need those beyond that.

How we keep it safe

We hold your information on secured systems, limit access to the staff who need it, and use the technical and organisational measures appropriate for a club of our size. No system is perfectly secure, but we take reasonable care to protect what you give us.

If a breach ever puts your information at real risk, we will deal with it and tell those affected and the Data Protection Commissioner, as the law requires.

Your rights

Under Section 26 of the Data Protection Act, 2019, you have the right:

• to be told how your information is being used, which this policy is part of;
• to be given access to the information we hold about you;
• to object to us using your information, in whole or in part;
• to have information corrected if it is false or misleading;
• to have information deleted if it is false or misleading.

Beyond these, if you simply want us to delete your details, email us and ask. We will remove them and confirm once it is done, unless the law requires us to keep something. To use any of these rights, email info@kisasa.football and we will respond as quickly as we can.

Complaints

If you are unhappy with how we have handled your information, please raise it with us first at info@kisasa.football and we will try to put it right. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner, Kenya’s data protection authority, at odpc.go.ke.

Changes to this policy

If we change how any of this works, we will update this page and note the date below.

Contact

Questions about this policy or your information: info@kisasa.football.

Last updated: 16 June 2026.