Privacy centre

Your data, your rights, in plain terms

This page is maintained by AAHRED to answer common privacy questions about this site and the secretariat's data handling. It describes our own practices; it is not an independent certification or a legal opinion.

Controller

AAHRED, headquartered in Nairobi, Kenya, is the data controller for this website and for enquiries submitted through it.

Frameworks

Practices are aligned to the EU GDPR, the Kenya Data Protection Act 2019 and the CCPA/CPRA rights framework.

No sale of data

AAHRED does not sell personal information and does not share it for cross-context behavioural advertising.

Contact route

Privacy requests are handled through the secretariat contact form and acknowledged with a reference number.

Processing register

What we collect, why, and for how long

Every category of personal data processed through this site, with its lawful basis, retention schedule and recipients.

Category	Data held	Lawful basis	Retention	Recipients
Contact enquiries	Name, email, organisation, subject, message, attachments	Legitimate interest / consent	24 months from last contact	Secretariat staff only
Technical logs	User agent, request timestamps, error diagnostics	Legitimate interest (security)	12 months	Hosting and error-monitoring processors
Staff accounts	Email, authentication credentials, role assignment	Contract	Duration of engagement plus 12 months	Authentication processor
Programme research data	De-identified survey and routine service data	Consent / public interest research	Per approved protocol	Ministry data owners and named collaborators
Newsletter and updates	Email address, subscription preferences	Consent	Until unsubscribe	Email delivery processor

Your rights

Eight rights you can exercise at any time

Access

Request a copy of the personal data we hold about you and the purposes of processing.

Rectification

Ask us to correct inaccurate or incomplete personal data.

Erasure

Request deletion where the data is no longer necessary and no legal duty requires retention.

Restriction & objection

Object to processing based on legitimate interest, or ask that processing be restricted while a dispute is resolved.

Portability

Receive data you provided in a structured, machine-readable format.

Withdraw consent

Withdraw consent at any time where consent is the basis for processing, without affecting prior lawful processing.

Do not sell or share (CCPA/CPRA)

AAHRED does not sell personal information and does not share it for cross-context behavioural advertising.

Non-discrimination

Exercising any of these rights never affects the services or support you receive from AAHRED.

Request workflow

How a rights request is handled

1. Submit
Send your request through the secretariat contact form, stating the right you wish to exercise and the data you are asking about.
2. Verify
We confirm identity proportionately — usually by replying to the email address associated with the data — before disclosing or deleting anything.
3. Assess
We check whether any statutory retention duty, research-ethics approval or legal claim prevents full action, and tell you if it does.
4. Respond
A substantive response is issued within 30 calendar days, extendable once by a further 30 days for complex requests, with reasons given.
5. Escalate
If you are dissatisfied you may escalate internally to the Data Protection focal point, and thereafter to your competent supervisory authority.

Submit a privacy request

Cookies & tracking

Our cookie position

This site sets no advertising, profiling or cross-site tracking cookies.
A session storage entry is used only to keep staff signed in to the secretariat console.
No third-party analytics or social media pixels are embedded in these pages.
Server logs are retained for security and reliability purposes and are not used to build user profiles.

Subprocessors

Who processes data on our behalf

Processor	Purpose	Location
Cloud application hosting	Website delivery and server-side application runtime	Global edge network
Managed database & storage	Storage of contact enquiries and attachments	Managed cloud region
Authentication service	Staff sign-in for the secretariat console	Managed cloud region
Transactional email delivery	Notification of enquiries to the secretariat	Managed cloud region

International transfers

Where data is processed outside its country of origin, transfers rely on documented safeguards including standard contractual clauses and processor agreements. Ministry-owned programme data stays under the data-sharing agreement negotiated with that ministry.

Children and vulnerable participants

Programme data involving children or vulnerable participants is collected only under an approved research protocol with guardian consent, data minimisation and de-identification before analysis.

Security of processing

Technical and organisational measures — role-based access, private storage, malware screening and audit trails — are described in full on the data governance and security page.

Data governance & security Transparency & accountability

Think tank, implementation partner and governance/MEL advisory in one institution

Evidence generation translates into execution and delivery, which is in turn evaluated and governed — closing the loop between research, policy design, operations and accountability. Each arm is independently staffed and independently reported, so evaluation is never marked by the team that delivered the work.

Pillar 1

Think Tank & Applied Research Arm

Evidence generation, policy analytics and horizon scanning

Translational policy research turning epidemiological, macroeconomic and spatial data into legislative roadmaps and ministerial briefs.
Econometric and micro-simulation modelling: cost-benefit analysis, UHC fiscal space assessment and predictive shock modelling.
Policy harmonisation with AU Agenda 2063, the Abuja Declaration, the Maputo Plan of Action and Africa CDC frameworks.
Ethics, bioethics and data sovereignty protocols safeguarding indigenous health data, genomic assets and vulnerable population registries.

Core outputs: Ministerial briefs, costed policy options, national investment cases, peer-reviewed papers and open data dictionaries.
Methods & instruments: Micro-simulation, spatial econometrics, cost-benefit and fiscal-space modelling, horizon scanning and political-economy analysis.
Delivery capacity: 42 researchers, economists and modellers across epidemiology, health financing, GIS and bioethics.

Pillar 2

Implementation & Programme Delivery Arm

Technical assistance, direct execution and capacity building

Direct programme rollout and pilot scalability across maternal-child health, cross-border surveillance, nutrition hubs and safety nets.
Embedded technical assistance seconding senior advisors, health economists and data architects into line ministries and RECs.
SOP development codifying clinical pathways, MISP emergency response and multi-agency coordination manuals.
Institutional capacity building for decentralised civil servants, local councils and community health networks.

Core outputs: Programme designs, SOP libraries, service-delivery pilots, supply and referral pathways, trained frontline cadres.
Methods & instruments: Embedded technical assistance, results-based grant execution, MISP emergency response, sub-award management and procurement support.
Delivery capacity: Field teams across 14 countries with surge deployment inside 72 hours for outbreak and displacement events.

Pillar 3

MEL & Governance Advisory

Accountability, systems strengthening and oversight

Third-party monitoring and independent verification of multilateral programmes in high-risk and cross-border corridors.
Impact evaluation using RCTs, difference-in-differences and mixed-method process evaluation to measure attribution and ROI.
Digital MEL infrastructure: mobile-first pipelines, geospatial dashboards and automated anomaly detection against data falsification.
Public financial management and governance audits covering procurement integrity and expenditure tracking.

Core outputs: Independent verification reports, impact evaluations, governance and PFM audits, live MEL dashboards.
Methods & instruments: RCTs, difference-in-differences, mixed-method process evaluation, third-party monitoring and anomaly detection analytics.
Delivery capacity: Evaluation unit operating to OECD-DAC criteria with a firewalled reporting line to the Board Audit Committee.

Programmatic lifecycle

Diagnose

Burden, equity and fiscal-space diagnostics using national datasets, geospatial layers and community consultation.

Design

Costed intervention design with theory of change, indicator framework and explicit assumptions on attribution.

Pilot

Controlled implementation with embedded measurement to test feasibility, unit economics and delivery risk.

Scale

Government-owned scale-up with SOPs, workforce training, procurement pathways and digital reporting rails.

Evaluate

Independent evaluation, public financial audit and open publication of results — including null findings.

Multi-level institutional engagement

Who AAHRED works with at each level of governance, what it delivers there, the legal instruments used and the cadence of reporting back to partners.

Governance level	Core institutional clients	Key service offerings	Engagement instruments	Reporting cadence
Continental & Multilateral	African Union, Africa CDC, UNECA, WHO AFRO, World Bank, Global Fund	Strategic framework development, regional public goods governance, cross-border treaty alignment and macro-level grant evaluation.	Framework agreements, technical secretariats, joint working groups	Multi-year (3–5 yrs)
Regional Economic Communities	EAC, IGAD, ECOWAS, SADC	Surveillance harmonisation, cross-border migration protocols and trade-related biosecurity standards.	Protocol harmonisation compacts, corridor surveillance MOUs	Annual review cycles
National Governments	Ministries of Health, Finance, Gender/Social Protection and Agriculture	Policy formulation, UHC benefit package design, fiscal space analysis and embedded ministerial technical assistance.	Embedded advisory placements, costed national plans, MoUs	Budget-cycle aligned
Sub-National & Local Governance	County and district health directorates, municipalities, local councils	Decentralised planning, budget execution tracking, frontline worker training and community engagement architecture.	County work plans, community compacts, frontline training grants	Quarterly

Closing the policy-to-execution gap

Unlike academic think tanks producing non-operational papers, or NGOs executing without rigorous evaluation, AAHRED unifies theoretical rigour with frontline delivery.

End-to-end programmatic lifecycle

Empirical research → policy drafting → pilot implementation → nationwide scale-up → independent impact evaluation.

South-led contextualisation

Endogenous African data models accounting for informal economies, pastoralist mobility and customary governance systems overlooked by external consultancies.

Evaluation standards

OECD-DAC criteria

Financial reporting

IFRS + 2 CFR 200

Data protection

GDPR / national DPAs

Safeguarding

PSEAH policy, independent channel