Policies

Privacy Notice

Last updated: 12 November 2026

Draft for review. This page must be reviewed and approved by the business owner, with legal advice where needed, before the platform accepts real payments (PRD §6 and §15).

This notice explains what personal information The Healing Journey, presented by Millicent Odhiambo, collects when you use this website, why we collect it, who we share it with and your rights. We aim to follow the Kenya Data Protection Act, 2019.

What we collect

When you register: your full name, email address, M-Pesa phone number, the webinar you chose, and when you accepted our terms and this notice.
When you pay: payment status, amount, the M-Pesa receipt number and references from our payment provider. We never see or store your M-Pesa PIN.
When you contact us: what you write in the Help or invitation form, and your contact details.
When you sign in: your email address and sign-in records.
Technical information: limited logs needed to keep the service secure and working, such as error reports.

Please do not share sensitive details about your health or personal circumstances in our forms. We do not need them to provide the service.

Why we use it

To register you, take payment and confirm your place
To give you secure access to the webinar you paid for
To send you messages about your registration, such as confirmations and reminders
To answer your questions and handle refunds
To keep accurate financial records and meet legal obligations
To protect the service against fraud and misuse

We do not sell your information and we do not send marketing without your consent.

Who we share it with

We use trusted service providers who process information on our behalf:

IntaSend, to process M-Pesa payments
Supabase, to store our database securely (hosted in the European Union)
Vercel, to host this website
Resend, to send emails
Zoom, to run the webinars
WhatsApp (Meta), if you choose to message us on WhatsApp; WhatsApp's own privacy policy applies to those chats

Some of these providers process information outside Kenya. We choose providers with appropriate safeguards for this.

How long we keep it

We keep registration and payment records for as long as needed for accounting and legal purposes, and other information only as long as it is needed for the purpose it was collected for.

Your rights

You may ask to see the personal information we hold about you, ask us to correct or delete it, or object to how we use it, subject to our legal obligations. To make a request, please use the Help form.