Last updated: 7 October 2026
This Privacy Policy explains how NGO Jobs Africa ("we", "us", "our"), the operator of jobs.ngoportal.africa, collects, uses, shares and protects personal data when you use the Site, create an account, buy a pass, add money to your account, set up alerts, join our referral programme, follow our WhatsApp channel or post an opportunity. We process personal data in line with the Kenya Data Protection Act, 2019 and its regulations and, where it applies to you, the EU and UK General Data Protection Regulation.
1. Who is responsible for your data
NGO Jobs Africa is the data controller for personal data processed through the Site. Contact: admin@jobs.ngoportal.africa, Keystone Park, Riverside Drive, Nairobi, Kenya.
2. What we collect
- Account data: name, username, email address, phone number, country, password (stored encrypted) and account type.
- Optional profile information: career level, sectors of interest and how you heard about us. You can change these at any time.
- Candidate data you choose to provide: CV, professional title, location, skills, education, experience and links.
- Organisation data: organisation name, website, logo, contact person and the opportunities you post.
- Payment data: for M-Pesa payments, the paying phone number, amount, M-Pesa receipt code, transaction status and time. For card payments, our card payment processor sends us the amount, a payment reference, the card type, the last four digits and the transaction status. We never receive your M-Pesa PIN or your full card details.
- Pass, balance and referral records: the passes you buy and their dates, your account balance and every change to it, your automatic renewal setting, your referral code, visits to your referral link, the friends who join through it and the rewards credited.
- Alerts, subscriptions and saved items: search keywords, locations, categories, alert frequency, weekly email preferences and bookmarked opportunities.
- Messages and reports: contact form enquiries and "Report this listing" submissions.
- Usage and technical data: IP address, approximate location, browser and device type, pages and opportunities viewed, searches, clicks on application links, sign-in times, referring page, and date and time. Full IP addresses are kept for 90 days and then shortened.
3. How we use it and our legal bases
- To provide accounts, passes, saved opportunities, alerts, the weekly email, CV visibility and posting (performance of a contract).
- To take and confirm payments, send receipts and handle payment queries (performance of a contract and legal obligation).
- To keep your account balance, apply it at checkout, renew your pass automatically if you have chosen that, and show you a record of every payment and balance change (performance of a contract).
- To keep the 3-day pass to one per person and to check that referral rewards are genuine, using your phone number and email address (legitimate interests in preventing fraud).
- To run the referral programme and credit rewards (performance of a contract).
- To send service emails about your pass and balance, including a reminder 24 hours before a pass ends and renewal notices if you use automatic renewal (performance of a contract).
- To keep listings accurate and protect users from fraud, including reviewing reports (legitimate interests).
- To secure the Site, prevent abuse and fix problems (legitimate interests).
- To understand how the Site is used and improve it (legitimate interests, and consent for analytics cookies where required).
- To send offers and news, only if you opt in, and never more than one offer email every 14 days (consent).
- To meet legal, tax and accounting obligations (legal obligation).
We do not sell personal data, and we do not make automated decisions that have legal or similarly significant effects on you.
4. Referral programme
If you join through a referral link, we record which member invited you so their reward can be credited. That member sees a masked version of your name (for example, the first letter only), the date you joined and whether you bought a pass. They do not see your email address, phone number or payment details.
5. Applying to opportunities
Most opportunities link to the organisation's own recruitment page or email address. When you apply there, you give your data directly to that organisation and its own privacy policy applies.
6. Who we share data with
- Organisations you apply to through the Site, or whose candidate search you have opted into.
- Service providers who help us run the Site, including hosting, email delivery, security, backups and payment processing through Safaricom M-Pesa and our card payment processor, under contracts that require them to protect your data.
- Authorities, where the law requires it or to protect the rights, safety and property of our users or the public.
7. WhatsApp channel
Our WhatsApp channel is a broadcast channel. Following it does not share your phone number with us or with other followers. Your use of WhatsApp is governed by WhatsApp's own terms and privacy policy.
8. International transfers
Some service providers may store or process data outside Kenya. Where this happens we apply the safeguards required by the Kenya Data Protection Act, 2019 (and the GDPR where applicable), such as contractual protections and providers with appropriate security measures.
9. How long we keep data
- Accounts, CVs, alerts and subscriptions: while your account is active. We delete or anonymise them within 30 days of you closing your account, or after 24 months of inactivity.
- Payment, pass, balance and referral records: as long as tax, accounting and fraud prevention needs require, normally up to seven years.
- Reports and security logs: up to 12 months, unless needed longer to investigate fraud or a legal claim.
10. Cookies and similar technologies
- Essential: keep you signed in, remember your cookie choices and secure the Site.
- Referral cookie: when you arrive through a referral link we store the referral code for 30 days so the invitation can be credited.
- Preferences: remember small choices, such as closing the WhatsApp button, on your own device.
- Analytics: help us understand how the Site is used, only with your consent where consent is required.
You can accept, reject or change your choices at any time through the cookie settings icon, and you can block cookies in your browser.
11. Your rights
Subject to the law, you have the right to be informed; to access your data; to correct or delete it; to object to or restrict processing; to data portability; and to withdraw consent at any time. You can update most details in your account. To exercise any right, email admin@jobs.ngoportal.africa. We respond within the time limits set by law. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner, Kenya (www.odpc.go.ke), or to your local data protection authority.
12. Security
We use encrypted connections, access controls, sign-in protection, regular updates and backups to protect personal data. No online service is completely secure, so please use a strong, unique password and never share it. We will never ask for your M-Pesa PIN, card PIN, card security code or password.
13. Children
The Site is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
14. Changes
We may update this policy. The date at the top shows the current version, and we will tell registered users about significant changes by email or on the Site.

