How we use your information.

Last updated 31 October 2026

Darshan Music Mentorship collects personal data in line with Kenya's Data Protection Act, 2019. This page explains what we collect, why, who helps us handle it, where it is stored, how long we keep it and the rights you have.

Who is responsible for your data

Darshan Music Mentorship is the data controller: we decide how your information is used. You can reach us at Mwangaza Basa Centre, Room 6, Ngeria Junction, Eldoret, by email at support@darshan-music.org, or by phone on +254 101 170 465.

What we collect

The details you give us in a quote request or application: your name, phone and WhatsApp number, email (optional), location and the details of what you need. A tutor application also includes your instruments, your experience and any message you add.

When you send a form, we also record:

• the time you gave each consent;
• with a quote request, the page that referred you and any campaign tags in the link, so we know which adverts and partners work, and your browser and device details (the user agent your browser sends, which names the browser, the operating system and sometimes the device model), to help us fix problems;
• a scrambled code made from your internet (IP) address (a salted one-way hash; we do not store the address itself). We use it to stop spam and repeated automated submissions, and we keep it with your request for 30 days so we can look into abuse.

Giving us your details is voluntary. Without your name and a phone number we cannot reply to your request, so the forms do not send without them. Where a form asks for them, your email address and WhatsApp updates are optional.

If we measure visits to the website, we use privacy-friendly analytics that set no cookies, do not identify you and record page addresses without anything after the “?”. The public website sets no cookies of its own. Our staff sign-in area uses one strictly necessary cookie to keep staff signed in.

While you fill in the quote form, your answers are kept in your browser tab until you close it, so a reload does not lose them. After you send, the tab keeps only your reference, first name and a short summary for the thank-you page. This storage stays on your device; it is not a cookie, and nothing in it reaches us until you press send.

Why we collect it

To reply to your request, prepare a quote and deliver the service. If you opt in, to send you Darshan updates on WhatsApp. We store the time you gave consent.

• Your consent: you tick “Contact me about this request” before sending a form, and you choose separately whether to receive updates.
• Preparing and delivering a service you asked for: quotes, bookings and lessons.
• Keeping the website safe: spam and abuse prevention.

We do not sell your data, and we do not use it for advertising profiles.

Who helps us handle it

We share your data only with the service providers we need to run the website and reply to you:

• MySpace MyVibe LLC, a United States (Wyoming) company, hosts the website and its database for us, on servers in Germany (European Union).
• Cloudflare delivers and protects the website and routes our email. Requests to the website and emails to support@darshan-music.org pass through Cloudflare's network. Cloudflare also sends our team the email notification of your request, which contains the details you gave us.
• Google receives the email notifications of new requests in our team inbox, and may hold a working copy of requests in Google Sheets so we can reply quickly.
• WhatsApp (Meta) carries any conversation you start with us on WhatsApp, under WhatsApp's own terms.
• Google Maps and YouTube: the map on our contact page and our videos load from Google only when you choose to show the map or play a video. Video preview images are served from our own website (our server fetches them from YouTube), so your browser contacts YouTube only when you play a video. Once the map or a video is loaded, Google receives your IP address and may set cookies under its own privacy policy.

Transfers outside Kenya

Because our website is hosted in Germany by a United States company, and Cloudflare and Google run networks in many countries, your data is transferred and stored outside Kenya. We transfer it only as the Data Protection Act allows, and we protect it by:

• hosting it in the European Union, where the General Data Protection Regulation (GDPR) applies;
• encrypting it in transit (HTTPS) between your device, our website and our team;
• limiting access to the people at Darshan Music Mentorship and our hosting provider who need it to do their work;
• collecting only what we need, and replacing your IP address with a one-way code.

You can ask us for more detail about these safeguards at any time.

How long we keep it

• Quote requests and tutor applications: up to 24 months after our last contact with you, then deleted.
• The copy of each request or application emailed to our team inbox, and any copy in our Google Sheet: deleted on the same 24-month schedule.
• If you become a client or join our tutor network: for as long as we work together, and afterwards only as long as the law requires us to keep records such as invoices and payments.
• WhatsApp updates: until you withdraw your consent.
• The scrambled code made from your IP address: removed from your request after 30 days. The spam counters that use it are deleted after 30 days.

Your rights

You can ask to see, correct or delete your data, or withdraw consent for updates at any time, by emailing support@darshan-music.org or messaging us on WhatsApp (opens in a new tab). Under the Data Protection Act, 2019 you also have the right to:

• be told how your data is used (this page);
• object to us using your data;
• receive your data in a portable format.

We may ask you to confirm your identity before acting on a request. Withdrawing consent does not affect anything we did with your data before you withdrew it. If you are unhappy with how we handled your data, you can complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke (opens in a new tab). We would welcome the chance to put things right first.

Children

For learners under 18, a parent or guardian gives us the learner's details and consents on their behalf.

Photos and recordings

We only publish photos or recordings of learners, patients or participants with written consent, and from a parent or guardian for children.

How we protect it

The website uses HTTPS throughout. Staff accounts are protected by strong, salted password hashing, sign-in attempts are rate limited, and every change in the staff area is logged.

Changes to this page

If we change how we use your data, we will update this page and the date at the top.