Privacy Policy

InCAD — Institute for Capacity Development ("InCAD", "we", "us") respects your privacy and is committed to protecting the personal information of everyone who visits this website, enrolls in a program, or otherwise interacts with us. This policy is intended to comply with the principles of Kenya's Data Protection Act, 2019.

By using this website or enrolling in an InCAD program, you consent to the collection and use of information as described in this policy.

We collect information in the following ways:

We do not knowingly collect sensitive personal information (such as health or financial account details) through this website beyond what you voluntarily share with us, for example in a message describing your organization's training needs.

• To respond to enquiries and process program enrollment or consultation requests.
• To communicate program dates, venue changes, and other updates relevant to a program you've enrolled in.
• To send newsletter updates about new programs, where you have subscribed — you can unsubscribe at any time.
• To improve this website and our program offerings based on aggregated, non‑identifying usage patterns.
• To meet legal, regulatory, or contractual obligations, including those tied to performance contracting engagements.

This website may use minimal cookies or local browser storage to remember basic preferences (for example, a filter you selected on the program calendar) during your visit. We do not currently use third‑party advertising or tracking cookies. If that changes, this policy will be updated accordingly.

We do not sell your personal information. We may share information in limited circumstances:

• With facilitators or consultants directly delivering a program you've enrolled in, where necessary to deliver that program.
• With service providers who support our operations (for example, email delivery or hosting providers), under confidentiality obligations.
• Where required by law, regulation, or a valid legal process.
• With a sponsoring or partner organization, where you've enrolled through them and they require confirmation of participation.

We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as necessary to fulfill the purposes described in this policy — for example, for the duration of an active program relationship, plus a reasonable period afterward for record‑keeping, reporting, or legal purposes. Newsletter contact details are retained until you unsubscribe.

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information, where it is no longer needed for the purposes it was collected.
• Withdraw consent to marketing communications (such as the newsletter) at any time.
• Object to certain processing of your information.

To exercise any of these rights, contact us using the details in Section 12 below.

Our website and programs are directed at organizations and working professionals. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Some InCAD programs run in Tanzania and Uganda. Where you enroll in a regional cohort, limited information necessary for that program (such as your name and organization) may be shared with the local venue or co‑facilitating partner for logistics purposes, under the same confidentiality expectations described in this policy.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

For questions about this policy or to exercise your data rights, reach out: