Privacy
Privacy notice
What we collect, why, and what you can ask us to do about it. In plain language, because a notice nobody can read protects nobody.
Last updated: 28 September 2026
Who we are
Thriving in Chaos Network ("TCN", "we") is based in Nairobi, Kenya. We are the data controller for the information described here. You can reach us at thrive@thrivinginchaos.org.
This notice is written with Kenya's Data Protection Act 2019 in mind. Where you are outside Kenya, equivalent rights generally apply.
What we collect, and when
We collect personal data in exactly three places, all of them forms you choose to fill in.
| Form | What it collects | Why |
|---|---|---|
| Contact | Name, email, subject, message | To reply to you |
| Rooted in Freedom enquiry | Name, email, phone (optional), current stage, what interests you | To contact you about the programme |
| Newsletter signup | Email address | To send you occasional emails |
We do not ask for anything we do not need. We never ask for financial details, identification numbers or passwords — no payments of any kind are taken through this website. If a page ever appears to ask you for money or card details, it is not us; please tell us.
Young people's data
Much of this site is written for readers aged 14–17, so this matters more than usual.
- Our forms are designed for parents and guardians, not for children.
- We do not knowingly collect personal data from a child without parental involvement.
- We do not profile or advertise to anyone, and we do not use advertising cookies.
- If you believe a child has given us personal data, email thrive@thrivinginchaos.org and we will delete it.
Cookies and analytics
This site currently sets no analytics or advertising cookies at all. Your browser may store a small preference locally — for example whether you opened a menu — but that never leaves your device and we cannot read it.
Embedded videos
Our videos are hosted on YouTube. We deliberately do not load YouTube's player until you click play — the image you see first is served from our own site. Until you press play, YouTube receives nothing and sets no cookies. When you do press play we use youtube-nocookie.com, and from that point Google's own privacy policy applies.
Who else processes your data
- Cloudflare — hosts the site and delivers pages. Processes server logs including IP addresses for security and delivery.
- Resend — delivers form submissions to our inbox as email.
We do not sell your data, rent it, or share it for advertising. Ever.
How long we keep things
- Form messages: for as long as needed to deal with your enquiry, then routinely deleted.
- Newsletter: until you unsubscribe, which you can do from any email we send.
- Server logs: retained briefly by Cloudflare for security.
Your rights
Under the Data Protection Act 2019 you can ask us to:
- Tell you what personal data we hold about you
- Correct anything that is wrong
- Delete it
- Stop using it, or object to a particular use
- Provide a copy in a portable form
Email thrive@thrivinginchaos.org and we will respond. You also have the right to complain to the Office of the Data Protection Commissioner in Kenya.
Security
The site is served over HTTPS. Form submissions are validated and checked for automated abuse before being sent to us. No payment details are ever collected, so there are none to lose.
A note about what this site is not
TCN does not provide therapy, clinical counselling or crisis intervention, and our forms are not monitored around the clock. If you are worried about a young person's immediate safety, please see urgent support in Kenya rather than using a form here.
Changes
If we change how we handle personal data we will update this page and the date at the top.