AAHRED logoAAHRED home

Privacy centre

Your data, your rights, in plain terms

This page is maintained by AAHRED to answer common privacy questions about this site and the secretariat's data handling. It describes our own practices; it is not an independent certification or a legal opinion.

Controller

AAHRED, headquartered in Nairobi, Kenya, is the data controller for this website and for enquiries submitted through it.

Frameworks

Practices are aligned to the EU GDPR, the Kenya Data Protection Act 2019 and the CCPA/CPRA rights framework.

No sale of data

AAHRED does not sell personal information and does not share it for cross-context behavioural advertising.

Contact route

Privacy requests are handled through the secretariat contact form and acknowledged with a reference number.

Processing register

What we collect, why, and for how long

Every category of personal data processed through this site, with its lawful basis, retention schedule and recipients.

CategoryData heldLawful basisRetentionRecipients
Contact enquiriesName, email, organisation, subject, message, attachmentsLegitimate interest / consent24 months from last contactSecretariat staff only
Technical logsUser agent, request timestamps, error diagnosticsLegitimate interest (security)12 monthsHosting and error-monitoring processors
Staff accountsEmail, authentication credentials, role assignmentContractDuration of engagement plus 12 monthsAuthentication processor
Programme research dataDe-identified survey and routine service dataConsent / public interest researchPer approved protocolMinistry data owners and named collaborators
Newsletter and updatesEmail address, subscription preferencesConsentUntil unsubscribeEmail delivery processor

Your rights

Eight rights you can exercise at any time

Access

Request a copy of the personal data we hold about you and the purposes of processing.

Rectification

Ask us to correct inaccurate or incomplete personal data.

Erasure

Request deletion where the data is no longer necessary and no legal duty requires retention.

Restriction & objection

Object to processing based on legitimate interest, or ask that processing be restricted while a dispute is resolved.

Portability

Receive data you provided in a structured, machine-readable format.

Withdraw consent

Withdraw consent at any time where consent is the basis for processing, without affecting prior lawful processing.

Do not sell or share (CCPA/CPRA)

AAHRED does not sell personal information and does not share it for cross-context behavioural advertising.

Non-discrimination

Exercising any of these rights never affects the services or support you receive from AAHRED.

Request workflow

How a rights request is handled

  1. 1. Submit

    Send your request through the secretariat contact form, stating the right you wish to exercise and the data you are asking about.

  2. 2. Verify

    We confirm identity proportionately — usually by replying to the email address associated with the data — before disclosing or deleting anything.

  3. 3. Assess

    We check whether any statutory retention duty, research-ethics approval or legal claim prevents full action, and tell you if it does.

  4. 4. Respond

    A substantive response is issued within 30 calendar days, extendable once by a further 30 days for complex requests, with reasons given.

  5. 5. Escalate

    If you are dissatisfied you may escalate internally to the Data Protection focal point, and thereafter to your competent supervisory authority.

Submit a privacy request

Cookies & tracking

Our cookie position

  • This site sets no advertising, profiling or cross-site tracking cookies.
  • A session storage entry is used only to keep staff signed in to the secretariat console.
  • No third-party analytics or social media pixels are embedded in these pages.
  • Server logs are retained for security and reliability purposes and are not used to build user profiles.

Subprocessors

Who processes data on our behalf

ProcessorPurposeLocation
Cloud application hostingWebsite delivery and server-side application runtimeGlobal edge network
Managed database & storageStorage of contact enquiries and attachmentsManaged cloud region
Authentication serviceStaff sign-in for the secretariat consoleManaged cloud region
Transactional email deliveryNotification of enquiries to the secretariatManaged cloud region

International transfers

Where data is processed outside its country of origin, transfers rely on documented safeguards including standard contractual clauses and processor agreements. Ministry-owned programme data stays under the data-sharing agreement negotiated with that ministry.

Children and vulnerable participants

Programme data involving children or vulnerable participants is collected only under an approved research protocol with guardian consent, data minimisation and de-identification before analysis.

Security of processing

Technical and organisational measures — role-based access, private storage, malware screening and audit trails — are described in full on the data governance and security page.

Data governance & security Transparency & accountability

Tripartite operating model

Think tank, implementation partner and governance/MEL advisory in one institution

Evidence generation translates into execution and delivery, which is in turn evaluated and governed — closing the loop between research, policy design, operations and accountability. Each arm is independently staffed and independently reported, so evaluation is never marked by the team that delivered the work.

  • Pillar 1

    Think Tank & Applied Research Arm

    Evidence generation, policy analytics and horizon scanning

    • Translational policy research turning epidemiological, macroeconomic and spatial data into legislative roadmaps and ministerial briefs.
    • Econometric and micro-simulation modelling: cost-benefit analysis, UHC fiscal space assessment and predictive shock modelling.
    • Policy harmonisation with AU Agenda 2063, the Abuja Declaration, the Maputo Plan of Action and Africa CDC frameworks.
    • Ethics, bioethics and data sovereignty protocols safeguarding indigenous health data, genomic assets and vulnerable population registries.
    Core outputs
    Ministerial briefs, costed policy options, national investment cases, peer-reviewed papers and open data dictionaries.
    Methods & instruments
    Micro-simulation, spatial econometrics, cost-benefit and fiscal-space modelling, horizon scanning and political-economy analysis.
    Delivery capacity
    42 researchers, economists and modellers across epidemiology, health financing, GIS and bioethics.
  • Pillar 2

    Implementation & Programme Delivery Arm

    Technical assistance, direct execution and capacity building

    • Direct programme rollout and pilot scalability across maternal-child health, cross-border surveillance, nutrition hubs and safety nets.
    • Embedded technical assistance seconding senior advisors, health economists and data architects into line ministries and RECs.
    • SOP development codifying clinical pathways, MISP emergency response and multi-agency coordination manuals.
    • Institutional capacity building for decentralised civil servants, local councils and community health networks.
    Core outputs
    Programme designs, SOP libraries, service-delivery pilots, supply and referral pathways, trained frontline cadres.
    Methods & instruments
    Embedded technical assistance, results-based grant execution, MISP emergency response, sub-award management and procurement support.
    Delivery capacity
    Field teams across 14 countries with surge deployment inside 72 hours for outbreak and displacement events.
  • Pillar 3

    MEL & Governance Advisory

    Accountability, systems strengthening and oversight

    • Third-party monitoring and independent verification of multilateral programmes in high-risk and cross-border corridors.
    • Impact evaluation using RCTs, difference-in-differences and mixed-method process evaluation to measure attribution and ROI.
    • Digital MEL infrastructure: mobile-first pipelines, geospatial dashboards and automated anomaly detection against data falsification.
    • Public financial management and governance audits covering procurement integrity and expenditure tracking.
    Core outputs
    Independent verification reports, impact evaluations, governance and PFM audits, live MEL dashboards.
    Methods & instruments
    RCTs, difference-in-differences, mixed-method process evaluation, third-party monitoring and anomaly detection analytics.
    Delivery capacity
    Evaluation unit operating to OECD-DAC criteria with a firewalled reporting line to the Board Audit Committee.

  1. 01

    Diagnose

    Burden, equity and fiscal-space diagnostics using national datasets, geospatial layers and community consultation.

  2. 02

    Design

    Costed intervention design with theory of change, indicator framework and explicit assumptions on attribution.

  3. 03

    Pilot

    Controlled implementation with embedded measurement to test feasibility, unit economics and delivery risk.

  4. 04

    Scale

    Government-owned scale-up with SOPs, workforce training, procurement pathways and digital reporting rails.

  5. 05

    Evaluate

    Independent evaluation, public financial audit and open publication of results — including null findings.

Engagement matrix

Multi-level institutional engagement

Who AAHRED works with at each level of governance, what it delivers there, the legal instruments used and the cadence of reporting back to partners.

Institutional clients, service offerings, engagement instruments and reporting cadence at each level of governance.
Governance levelCore institutional clientsKey service offeringsEngagement instrumentsReporting cadence
Continental & MultilateralAfrican Union, Africa CDC, UNECA, WHO AFRO, World Bank, Global FundStrategic framework development, regional public goods governance, cross-border treaty alignment and macro-level grant evaluation.Framework agreements, technical secretariats, joint working groupsMulti-year (3–5 yrs)
Regional Economic CommunitiesEAC, IGAD, ECOWAS, SADCSurveillance harmonisation, cross-border migration protocols and trade-related biosecurity standards.Protocol harmonisation compacts, corridor surveillance MOUsAnnual review cycles
National GovernmentsMinistries of Health, Finance, Gender/Social Protection and AgriculturePolicy formulation, UHC benefit package design, fiscal space analysis and embedded ministerial technical assistance.Embedded advisory placements, costed national plans, MoUsBudget-cycle aligned
Sub-National & Local GovernanceCounty and district health directorates, municipalities, local councilsDecentralised planning, budget execution tracking, frontline worker training and community engagement architecture.County work plans, community compacts, frontline training grantsQuarterly

  • Closing the policy-to-execution gap

    Unlike academic think tanks producing non-operational papers, or NGOs executing without rigorous evaluation, AAHRED unifies theoretical rigour with frontline delivery.

  • End-to-end programmatic lifecycle

    Empirical research → policy drafting → pilot implementation → nationwide scale-up → independent impact evaluation.

  • South-led contextualisation

    Endogenous African data models accounting for informal economies, pastoralist mobility and customary governance systems overlooked by external consultancies.

Evaluation standards
OECD-DAC criteria
Financial reporting
IFRS + 2 CFR 200
Data protection
GDPR / national DPAs
Safeguarding
PSEAH policy, independent channel

How does AAHRED avoid marking its own homework?
The MEL and Governance Advisory arm is staffed separately from delivery teams and reports directly to the Board Audit Committee. Where a programme exceeds USD 2 million in value, evaluation is contracted to an external firm under OECD-DAC criteria and published in full, including null and negative findings.
Who owns the data and intellectual property generated?
Primary data collected in-country is co-owned with the relevant national authority and stored under that country's data-protection regime. Anonymised, aggregated indicators are released as open data under CC-BY 4.0 with a published data dictionary; genomic and vulnerable-population registries are governed by a separate sovereignty protocol requiring ministerial consent for any secondary use.
How quickly can AAHRED mobilise for an emergency?
Surge teams deploy inside 72 hours for outbreak, flood and displacement events in the 14 countries of operation, using the Minimum Initial Service Package (MISP) and pre-positioned framework contracts for procurement and logistics.
What financial and procurement standards apply?
Accounts are prepared under IFRS and audited annually by an international firm. Grant administration follows 2 CFR 200 for US-sourced funds and EU PRAG-equivalent procedures for European funds. Sub-awards are subject to pre-award capacity assessment, quarterly financial verification and spot audits.
How are safeguarding and misconduct concerns handled?
A PSEAH policy applies to every staff member, consultant and sub-grantee. Reports can be made through an independent channel that bypasses line management, are triaged within 48 hours and investigated by an external panel where a conflict of interest exists.
Can governments contract AAHRED directly?
Yes. Engagements are structured as framework agreements, embedded advisory placements or results-based delivery contracts, aligned to the national budget cycle so that costed plans arrive before the medium-term expenditure framework is fixed.
How is value for money demonstrated?
Every investment case carries a benefit-cost ratio, cost per DALY averted and a fiscal-space assessment. Delivery is tracked against unit-cost benchmarks, and variance above 15 percent triggers a formal review by the Programme Committee.