Last updated: June 2026
Kipaji Lab (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website or interact with our programmes, events, and services.
1. Who We Are
Kipaji Lab is a Pan-African film and media training organisation. We operate hubs in Nairobi (Kenya), Cape Town (South Africa), and Washington DC (USA), and produce the Red Balloon Festival. Our website is kemosotest.com/kipajilab.
For data protection enquiries, contact us at: hello@kipajilab.org
2. What Data We Collect
We collect personal data in the following circumstances:
- Programme interest registration — when you register interest in a Kipaji Lab programme or the Red Balloon Festival, we collect your first name, last name, email address, city, and creative discipline.
- Contact enquiries — when you submit a message via our Connect page, we collect your name, email address, and the content of your message.
- Newsletter sign-up — if you opt in to updates, we collect your name and email address.
- Website usage data — we may collect technical information including IP address, browser type, pages visited, and time on site via cookies and analytics tools (see Section 6).
We do not collect sensitive personal data (such as ethnicity, religion, or health information) unless you voluntarily provide it in a message.
3. How We Use Your Data
We use your personal data to:
- Process and respond to programme interest registrations and enquiries
- Send programme updates, event announcements, and newsletters (where you have opted in)
- Improve and administer our website and services
- Comply with legal obligations
We will not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
We process your personal data on the following legal bases under the UK GDPR and EU GDPR:
- Consent — for marketing communications and newsletters. You may withdraw consent at any time.
- Legitimate interests — for responding to direct enquiries and administering programme applications.
- Legal obligation — where processing is required to comply with applicable law.
5. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected. Programme interest registrations are retained for a maximum of 24 months unless you are admitted to a programme, in which case data is retained for the duration of your participation plus 5 years. You may request deletion at any time (see Section 7).
6. Cookies
Our website uses cookies to function and to understand how it is used. We use:
- Essential cookies — required for the website to operate (e.g. session management).
- Analytics cookies — to understand visitor behaviour and improve the site. These are only set with your consent.
You can manage your cookie preferences at any time via the cookie consent banner on this site. For full details, see our Cookie Policy.
7. Your Rights
Under UK GDPR and EU GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate or incomplete data
- Erasure — request deletion of your personal data (“right to be forgotten”)
- Restriction — request that we restrict processing of your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
To exercise any of these rights, contact us at hello@kipajilab.org. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority (the ICO in the UK, or your national data protection authority in the EU).
8. Third Parties and Data Sharing
We do not sell or rent your personal data. We may share data with trusted third-party service providers who assist us in operating the website and delivering our programmes, including hosting providers, email delivery services, and analytics platforms. All third-party processors are required to handle your data in accordance with applicable data protection law.
We may also disclose data if required to do so by law or to protect the rights, property, or safety of Kipaji Lab or others.
9. International Transfers
As an international organisation with operations in Kenya, South Africa, and the USA, data may be transferred to and processed in countries outside the UK and EU. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Continued use of our website following any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Kipaji Lab
Email: hello@kipajilab.org
Website: kemosotest.com/kipajilab/connect/