Fika Privacy Policy

Privacy Policy

Fika cares deeply about the protection of all personal data that we collect and store. Your privacy is important to us, and we are committed to protecting it.

This privacy policy tells you what to expect us to do with your personal information. This policy applies to all information received by Fika, both online and offline, on any Platform (“Platform” includes the Fika website and mobile applications), as well as any electronic, written, or oral communications.

Collection and Use of Your Personal Information

What information do we collect and use, and why?

We may collect or use the following information to receive donations or funding, and to thank you for your support:

  • Names and contact details
  • Addresses
  • Payment or banking details (collected through secure third-party payment processors that use encryption and other security measures)
  • Taxpayer information (if applicable)

We may collect or use the following personal information for marketing purposes:

  • Names and contact details
  • Addresses
  • Marketing preferences
  • Donation history
  • Website and app user journey information
  • Recorded images, such as photos or videos (with your consent)
  • Records of consent, where appropriate

Note: We use your information to provide you with updates about our work. We will never sell your personal information to third parties.

We may collect or use the following personal information for research on rural access issues:

  • Names and contact details
  • Addresses
  • Recorded images, such as photos or videos
  • Records of consent, where appropriate

We may collect or use the following personal information to comply with legal requirements (like contracts, tax filing, etc.):

  • Names and contact details
  • Identification documents
  • Financial transaction information

We may collect or use the following personal information for recruitment purposes:

  • Names and contact details
  • Employment history (eg, job application, employment references)
  • Education history (eg, qualifications)

We may collect or use the following information to provide services (such as advising, training, delivering, supervising, designing rural transport infrastructure projects, programs, and policies):

  • Names and contact details
  • Addresses
  • Photographs or video recordings
  • Call recordings
  • Records of meetings and decisions
  • Payment details 

If you use our application(s), we may also collect the following information if you choose to provide us with access or permission:

  • Geolocation Information. We may request access or permission to obtain location-based information from your mobile device to record infrastructure barrier/needs requests. You may decline to provide access, however we cannot accept infrastructure requests without the location of the barrier. 
  • Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device’s camera or photo library. You may decline to provide access, however we cannot accept infrastructure requests without photos of the location.
  • Mobile Device Data. When you consent to the terms to use our applications, we automatically generate a random identifier via Keystore or Keychain to keep a record of your consent, to associate your survey responses with that identifier, and to be able to locate your survey responses should you contact us regarding your data privacy rights.
  • Communications. We may request to send you communications regarding your infrastructure requests via our application. If you wish to opt out of receiving these types of communications, you may do so in the application.

This information is needed to receive and process your submission of a rural access infrastructure need.

Under what circumstances do we process children’s personal information?
  • B2P’s website and apps are not designed for individuals under 18 years old; however, they may be used by a general audience. Fika indicates that any usage of our website or apps by users under 18 years of age must be done with the supervision and permission of a parent or guardian. 
  • Fika takes photos and videos of bridge sites, which sometimes contain community members or bridge users, including children. Parental consent is obtained before using these images.

How do we receive personal information?
  • We usually get your information directly from you (when you provide your information to us, or when you use or view our website/applications via your browser’s cookies)
  • In some cases, we may receive your contact information from publicly available sources
  • In some cases, we may receive your contact information from a mutual contact

How long do we keep personal information?

Fika stores personal information for at least 5 years after our last interaction with you, unless we are required by law to retain your information for longer (for example, regarding certain employment records).

Who do we store and share personal information with?

Data processors

Fika securely stores and processes your data using the following categories of processors.

  • Human resources management processors (to manage employee/applicant records, for example)
  • Communications processors (to send emails to partners, for example)
  • File storage processors (to store contract information, for example)
  • Payment platform processors (to pay employees and suppliers, or to process donations, for example)
  • Database processors (to store contractor information related to bridge records, for example)

Fika reviews all processors to ensure we work with reputable and compliant partners. Where necessary, we may transfer personal information outside of your country, according to the locations of the servers for the relevant data processors. When doing so, we comply with data protection regulations, making sure appropriate safeguards are in place.

 

Others we share personal information with:

  • Local authorities or councils, as required, or as related to your submission of infrastructure requests 
  • Relevant regulatory authorities, as required 
  • External auditors or inspectors, as required

Fika will never sell your personal data to third parties.

Use of Cookies

What are cookies?

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information automatically through the use of cookies or similar technologies.

For further information, visit allaboutcookies.org.

How do we use cookies?

Fika uses cookies in a range of ways to improve your experience on our website, including:

  • Supporting features like videos on our website to function correctly
  • Understanding how you use our website
  • Advertising relevant content to you

There are a number of different types of cookies; however, our website uses:

  • Strictly necessary – these cookies are essential for our website/apps to function properly
  • Performance/analytics – Fika uses these cookies to ensure that certain components of our website function correctly, such as videos. Fika also uses these cookies to understand how you use our website so that we can improve our communications.
  • Advertising – Fika uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed, and information about your browser, device, and your IP address. Fika uses cookies and third-party services for advertising and analytics purposes.

How can you manage your cookies?

You can set your browser to not accept cookies, and the above website provides instructions on how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Your Data Protection Rights and How to Contact Us

Lawful bases and data protection rights

Your rights regarding your personal data include:

  • Your right of access – You have the right to ask us for copies of your personal information. You can request additional information, such as details about where we obtain personal information and with whom we share it. There are some exemptions, which means you may not receive all the information you ask for. 
  • Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. 
  • Your right to erasure – You have the right to ask us to delete your personal information, under certain conditions. 
  • Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information, under certain conditions. 
  • Your right to object to processing – You have the right to object to the processing of your personal data, under certain conditions. 
  • Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or you. 
  • Your right to withdraw consent – When we use consent as our lawful basis, you have the right to withdraw your consent at any time. 

To make a data protection rights request, please contact us using the contact details at the bottom of this privacy notice.

If you make a request, we must respond to you without undue delay and, in any event, within one month.

Please note that if you do not provide your contact information, we may not be able to provide a relevant response.

Our lawful bases for processing personal data are as follows:

  • Employee Data 
    • Contract is the legal basis for fulfilling contractual obligations such as processing payments.
    • Legal obligation is the legal basis for processing employee data to comply with laws such as the filing of employee taxes.
    • Otherwise, processing of employee data falls under legitimate interests, such as sending communications and invitations, and analyzing the workforce.
  • Job applicant data
    • Legitimate interest is the legal basis for processing job applicant data, as Fika needs this data to assess applications and follow up on interviews, or to headhunt prospective job applicants.
  • Donor data (individuals, institutional, in-kind)
    • Legal obligation is the legal basis for processing donor data, as Fika is a non-profit entity that is required to report on its financial sources.
    • Contract is the legal basis for processing donor data as well, as Fika must often communicate with the donor to report on spending and progress.
    • Otherwise, legitimate interest is the legal basis for processing donor data in other ways, such as sending communications regarding new fundraisers, or for contacting prospective donors regarding funding opportunities.
  • Partner data (government, corporate, training institution, bridge committees, research, etc.)
    • Contract is the legal basis for processing some partner data where Fika needs to communicate regarding an agreement, for example, to report on progress or arrange a project review meeting.
    • Otherwise, legitimate interest is the legal basis for processing partner data in other ways, such as sending communications regarding upcoming bridge maintenance, or for contacting prospective partners who have relevant experience or interests in rural transport development.
  • Fika Collect user data
    • Legitimate interest is the legal basis for processing Fika Collect users’ data, as the data is used for a public benefit: infrastructure planning. 
  • Contractor data
    • Contract is the legal basis for processing contractor data where a
    • In cases where there is no contract, then legitimate interests apply, for example, where Fika invites prospective contractors to bid on a project, or where Fika records the contractor who built a bridge for proper infrastructure records.
  • Supplier data
    • Contract is the legal basis for processing supplier data where contracts are in place, for example, to communicate regarding an order or to process payment information.
    • Otherwise, legitimate interest is the legal basis for processing supplier data in other ways, for example, to request information about other product availability or certifications, or to contact prospective suppliers regarding a potential purchase.
  • Research data
    • Consent is the legal basis for any processing of personal data regarding research on rural access issues.
  • Marketing data
    • Consent is the legal basis for processing the personal data of website visitors (i.e. through browser cookies) or newsletter subscribers. Consent is also the legal basis for collection of photos and videos used for promotional purposes.
    • We will never sell your personal information to third parties.

Contact details

If you have any questions about Fika’s privacy policy, our collection and use of personal information, or to exercise your data protection rights, please do not hesitate to contact us.

Email us: 

info@bridgestoprosperity.org using the subject: Data Protection Request

Write to us:

  • KG 360 Street, Kigali, Rwanda
  • 5500 Greenwood Plaza Blvd, Suite 130, Greenwood Village, CO 80111, USA
  • Block 213, Plot 321, Magulu Close, Bukoto, Kampala, Uganda
  • Mercy Plaza Building, 4th Floor, PO Box 27507-1000, Addis Ababa, Ethiopia
  • Plot 14 on Chila Road, Kabulonga, Lusaka, Zambia

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details above.

 

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to your local data protection authority.

 

Fika also provides a confidential mechanism for reporting incidents. You can contact us at incidents@bridgestoprosperity.com.

Last updated

This privacy policy was last updated on 4 June 2025.