Policy

Privacy policy

How information submitted through waithakandegwa.com is handled.

Information you provide

The contact form collects the details you choose to submit there. Contributions may be recorded anonymously. Names are optional; M-Pesa requires a phone number to initiate STK Push and Pesapal requires either an email address or phone number to create card checkout. When anonymous is selected for card support, that transaction contact is sent to Pesapal but is not saved as the contributor’s contact record on this website. Payment transaction references, amount, currency, method and status may be retained for reconciliation.

Why it is used

Information is used to respond to messages, process and reconcile contributions, protect the website from abuse, maintain records where reasonably necessary, and understand site performance when analytics consent has been given.

Payments

M-Pesa transactions are processed through Safaricom services, card transactions through Pesapal, PayPal contributions through PayPal, and bank transfers use the published Wise receiving details. This website does not store card numbers, M-Pesa PINs or PayPal passwords. Payment providers may request information they require to process a transaction under their own terms.

Private media consent

When a photograph, video, audio recording or conversation needs explicit permission, I may send the person an unlisted consent link. The form asks only for information reasonably needed to document permission, such as a name/electronic signature, selected uses, attribution choice, timestamp and optional contact or country. The link is excluded from search indexing and is not part of the public website navigation.

Private appreciation and expense records

If I reimburse expenses or give a modest appreciation connected with a conversation, photograph or other contribution, the Writer area can retain a private payment trace such as amount, currency, method, transaction reference and optional proof. These records are not displayed publicly and are kept separately from the person’s consent choices.

Startup and founder submissions

Founder submissions collect the contact details, venture information, proposed story and evidence you choose to provide. These records are reviewed privately. Sending a submission does not publish it. Public founder stories require editorial review and the founder’s approval of the exact final story version. Private review links are sent to verified email and WhatsApp contacts with permission. Founders may approve, decline or propose edits; edited versions need a new review, with a maximum of three rounds. The default response window is 14 days after both providers accept the notifications, configurable when requesting a review. Declined, expired and three-times-unapproved stories are discarded from publication, while a private audit record is retained. Notification failures are distinguished from a founder’s refusal. Private evidence and contact information are not included in the public collection.

Email updates

Subscription requests require confirmation through a time-limited email link before an address is marked subscribed. Subscription and consent records are retained to deliver requested updates and honour unsubscribe requests. Confirmation and unsubscribe links are excluded from analytics. You may unsubscribe using the link provided in an update or contact the website for help.

Booking documents and private reports

Visitors choose calendar-verified time slots. All new bookings require host approval after a private briefing report is prepared. Optional PDF, JPEG or PNG attachments remain private and are not automatically sent to an AI provider. The host can review them manually or, where authorised, explicitly request a private briefing draft using OpenAI or Google Gemini. AI output is unverified and reviewed by the host. If analysis is unavailable, the request remains for manual document review. The private workspace also stores notes and reviewed reports; selected notes are sent to the chosen AI provider only with explicit author consent. Reports are shared by email or prepared in WhatsApp only through an explicit author action.

Service providers

Configured hosting, email, analytics and social publishing providers process the information needed to supply their services. Social account grants are used only for the selected connections and approved publishing tasks. Access tokens are stored encrypted and are not displayed publicly. Public social posts are subject to the relevant platform’s privacy settings and terms.

Analytics and cookies

The Google tag library loads on public editorial pages when analytics is enabled. Analytics data collection and analytics cookies remain disabled until you allow analytics. Advertising storage and personalisation remain disabled. Private links, Writer pages, searches, contact and payment forms are excluded. Only recognised campaign identifiers are retained for attribution; submitted form values and private link tokens are not sent. Necessary session and security cookies may operate without analytics consent because they are required for site functionality.

Your requests

You may use the contact form to request access, correction or deletion of personal information held by this website, subject to records that must be retained for legal, security or accounting reasons.