Privacy Policy
Last Updated: August 26 2026
Nannies at Work Africa Limited, trading as NaaWA (“NaaWA”, “we”, “our”, or “us”), respects your privacy and is committed to protecting Personal Data.
This Privacy Policy explains how NaaWA collects, uses, shares, protects, and retains Personal Data through its Website, mobile applications, parent onboarding, childcare operations, employer partnerships, event childcare, payments, communications, CCTV/photo features, and related services.
1. Introduction
This Privacy Policy applies to Personal Data processed by NaaWA in connection with its Website, applications, services, operations, and related activities.
This Policy should be read together with the NaaWA Website Terms and Conditions, Cookie Policy, applicable service terms, and other relevant policies.
NaaWA is committed to handling Personal Data responsibly and applying appropriate safeguards, particularly where Personal Data relates to children.
2. Definitions
For purposes of this Privacy Policy:
NaaWA means Nannies at Work Africa Limited, trading as NaaWA.
Personal Data means information relating to an identified or identifiable natural person and includes sensitive personal data and children’s personal data where applicable.
Data Subject means an identified or identifiable natural person whose Personal Data is processed by NaaWA.
Parent/Guardian means a parent, guardian, or other person authorised to provide information or consent concerning a child.
Child means a person receiving or considered for NaaWA childcare services.
Caregiver means an individual providing or involved in the provision of childcare services through NaaWA.
Services means NaaWA’s childcare, technology, professional, subscription, event, partnership, and related services.
Website means the NaaWA website and related online pages, forms, booking flows, and digital services.
Processor means a third party that processes Personal Data on behalf of NaaWA.
3. Scope
This Privacy Policy applies to Personal Data collected and processed through:
- The NaaWA Website and mobile applications.
- Parent and guardian onboarding.
- Childcare operations.
- Employer partnerships.
- Event childcare.
- Payments and billing.
- Communications.
- CCTV and photo-related features.
- Related NaaWA services and operations.
4. Personal Data We Collect
Depending on your relationship with NaaWA and the services you use, we may collect the following categories of Personal Data.
Parent and Guardian Information
This may include:
- Name.
- Contact details.
- Address.
- Identity and verification details.
- Employer details.
- Payment references.
- Communications with NaaWA.
Children’s Information
This may include:
- Name.
- Date of birth.
- Gender where relevant.
- Authorised pickup information.
- Medical history.
- Allergies.
- Dietary needs.
- Immunisation records.
- Emergency contacts.
- Attendance information.
- Activities.
- Development notes.
- Photographs.
- CCTV-related access logs.
Staff and Caregiver Information
This may include:
- Identity information.
- Qualifications.
- Background checks.
- Attendance.
- Training records.
- Performance information.
- Incident reports.
Website and Application Information
This may include:
- Device information.
- Cookies.
- Analytics information.
- IP addresses.
- Logs.
- Usage data.
5. How We Use Personal Data
NaaWA may use Personal Data for the following purposes:
Childcare Enrollment and Service Delivery
To process enrollment, onboarding, verification, bookings, and the delivery and administration of childcare services.
The lawful bases may include contract, consent, and legitimate operational necessity.
Child Data and Medical/Dietary Processing
To provide appropriate childcare, safety, safeguarding, medical, dietary, and related services.
Such processing may rely on parent or guardian consent and consideration of the best interests of the child.
Payments and Billing
To process payments, billing, financial administration, and related records.
The applicable bases may include contractual requirements and legal obligations.
Safety, Safeguarding and Incident Response
To support child safety, safeguarding, emergency response, incident management, and compliance with applicable obligations.
The applicable bases may include legal obligations, vital interests, and the best interests of the child.
Employer Reporting
To provide appropriate reporting to employer partners, using aggregated or de-identified reporting where possible.
Marketing
To communicate information about NaaWA services, campaigns, and relevant updates where permitted.
Marketing may be based on consent or opt-out compliant communications.
6. Legal Bases for Processing
Depending on the circumstances, NaaWA may process Personal Data on the following bases:
- Consent.
- Performance of a contract or provision of requested services.
- Legal obligations.
- Legitimate operational necessity where applicable.
- Vital interests where applicable.
- The best interests and rights of the child where applicable.
The specific lawful basis will depend on the nature and purpose of the processing.
7. Children’s Personal Data
NaaWA recognises that children’s Personal Data requires enhanced protection.
NaaWA processes children’s Personal Data only with appropriate parent or guardian consent or another applicable legal basis and where processing protects and advances the rights and best interests of the child.
NaaWA applies enhanced safeguards, access controls, data minimisation, retention limits, and consent records when processing children’s Personal Data.
Information concerning children’s medical, allergy, dietary, attendance, development, safeguarding, and other operational needs will be handled only as necessary for applicable childcare, safety, legal, or service purposes.
8. Sharing and Disclosure of Personal Data
NaaWA may share Personal Data with authorised parties where necessary to provide services, meet legal obligations, protect safety, or support its operations.
These may include:
- Authorised caregivers and staff.
- Employers on an aggregated or approved basis.
- Payment processors.
- Technology providers.
- Regulators.
- Emergency responders.
- Insurers.
- Auditors.
- Legal advisers.
- Other authorised processors necessary to deliver NaaWA services.
NaaWA requires appropriate confidentiality and data protection controls for relevant third parties.
9. International Transfers and Hosting
Where cloud services, support personnel, or other processors are located outside Kenya, NaaWA will implement legally appropriate safeguards and disclose material processing arrangements where required.
10. Security of Personal Data
NaaWA uses administrative, technical, and physical controls designed to protect Personal Data against unauthorised access, misuse, loss, alteration, or other inappropriate processing.
These controls may include:
- Access controls.
- Authentication.
- Encryption.
- Secure storage.
- Staff training.
- Audit logs.
- Retention schedules.
No method of transmission or storage can be guaranteed to be completely secure. NaaWA will nevertheless take appropriate measures to protect Personal Data in accordance with applicable requirements.
11. Data Retention
NaaWA retains Personal Data only for as long as necessary for the purposes for which it is processed, including service delivery, safety, legal, accounting, dispute, safeguarding, and compliance purposes.
The retention baseline provided in the NaaWA Privacy Policy is:
| Data Type | Default Retention |
|---|---|
| Parent account and billing | Term plus statutory/accounting period |
| Child operational records | Term plus safeguarding/legal period |
| Medical/allergy records | Active enrollment plus necessary legal/safety period |
| CCTV footage | Shortest practicable period unless incident hold applies |
| Marketing leads | Until opt-out or no longer required |
| Incident reports | Longer of legal/safeguarding limitation period or policy requirement |
12. Data Subject Rights
Subject to applicable law, Data Subjects may request:
- Access to their Personal Data.
- Correction of inaccurate or incomplete Personal Data.
- Deletion of Personal Data where applicable.
- Restriction of processing.
- Objection to processing.
- Data portability.
- Withdrawal of consent where applicable.
Requests involving children’s Personal Data will be assessed with appropriate consideration of parent or guardian authority and the best interests of the child.
13. Cookies and Similar Technologies
NaaWA’s Website and applications may use cookies and similar technologies.
These technologies may collect or process information such as device information, analytics information, IP addresses, logs, and usage data.
For more information about how NaaWA uses cookies and the choices available to you, please refer to the NaaWA Cookie Policy.
14. Changes to this Privacy Policy
NaaWA may update this Privacy Policy from time to time to reflect changes in its services, operations, technology, legal requirements, or data-processing practices.
Updates will be published on the Website, and the “Last Updated” date will be revised accordingly.
15. Contact and Complaints
For questions or requests relating to this Privacy Policy or the processing of Personal Data, contact NaaWA:
Nannies at Work Africa Limited (NaaWA)
P.O. Box 20801-00100
Nairobi, Kenya
Telephone: +254 733 289 288
Email: info@naawa.africa
Website: www.naawa.africa
Privacy inquiries may also be directed to the privacy contact designated by NaaWA.
Where applicable, individuals may lodge complaints with the Office of the Data Protection Commissioner (ODPC) in accordance with applicable Kenyan law.
