Legal
Privacy Notice
This notice explains what personal data Doria ("Doria Labs", "we", "us") collects through this website and the Doria platform, why we collect it, who it is shared with, and the rights you have over it. We process personal data in line with the Kenya Data Protection Act, 2019 (KDPA) and, where it applies, the EU General Data Protection Regulation (GDPR).
01 Who we are
Doria is a conservation-intelligence platform operated by Doria Labs. For any question about this notice or your personal data, contact us at royalesirandula@gmail.com. Doria Labs is the data controller for the data described below.
02 What we collect
a. When you contact us (this website)
The contact form collects only what you enter:
- Your name and email address
- Your organisation (optional)
- The message you send us
Our form provider also records the IP address and timestamp of the submission for spam prevention (see Section 4).
b. When you join the launch list
If you enter your email in the “Notify Me” box on our launch page, we collect your email address for one purpose — to tell you when Doria goes live. You can ask us to remove it at any time.
c. When you use the Doria platform (registered users)
- Account data — username, email address, and a securely hashed password
- Role & organisation — your assigned role and conservancy/team
- Reports you submit — species sighting details, geographic coordinates, photos or audio you upload, and timestamps
- Activity logs — actions you take in the platform, together with your IP address, kept for security and audit purposes
d. Cookies, local storage & technical data
We do not use advertising or third-party tracking cookies. To work, the platform stores a small amount of data on your own device:
- Session storage — your login token and permission settings, cleared when you close the tab or sign out
- Local storage — interface preferences (such as coordinate format) and any unsent report drafts
- Offline storage (IndexedDB & Cache Storage) — reports queued while you are offline and a copy of your last-loaded data, so the field app keeps working without a connection; wiped when you sign out
This storage is strictly necessary to provide the service you have asked for. Our pages also load typefaces from Google Fonts, which shares your browser's IP address with Google when a page loads.
03 Why we use it & our lawful basis
| Purpose | Lawful basis (KDPA / GDPR) |
|---|---|
| Responding to enquiries sent through the contact form | Legitimate interest / your consent in submitting the form |
| Emailing you once when the platform launches (launch list) | Your consent, which you can withdraw at any time |
| Storing your session, drafts and offline data on your device | Strictly necessary to provide the service you requested |
| Creating and securing your account | Performance of a contract; legitimate interest in security |
| Storing and validating conservation reports | Legitimate interest in conservation; consent where required |
| Audit logging and fraud/abuse prevention | Legal obligation; legitimate interest in security |
04 Who we share it with
We do not sell personal data. We share it only with service providers that help us run Doria:
- FormSubmit — processes contact-form submissions and forwards them to our email inbox
- Google — Google Fonts (page typefaces) and Google Earth Engine (geospatial processing of report locations)
- Movebank — animal-movement data integration
- Email provider — where enquiries and notifications are received
These providers act as our data processors and may only use the data to provide their service to us.
05 International transfers
Some of the providers above are located outside Kenya (for example, in the United States). This means your personal data may be transferred and processed abroad. Where we make such a transfer we take steps to ensure it is protected to a standard consistent with the KDPA and, where applicable, the GDPR.
06 How long we keep it
- Contact enquiries — kept only as long as needed to handle your request and any follow-up, then deleted
- Account data — kept while your account is active; removed on request or a reasonable period after closure
- Reports — retained for conservation and research value; may be anonymised rather than deleted
- Audit logs — retained for a limited period for security purposes
07 Your rights
Under the KDPA and the GDPR you have the right to:
- Be informed about how your data is used (this notice)
- Access a copy of the data we hold about you
- Correct data that is inaccurate or incomplete
- Request erasure ("right to be forgotten")
- Object to or restrict certain processing
- Request portability of data you provided to us
To exercise any of these rights, email royalesirandula@gmail.com. We will respond within the timeframe required by law.
08 Sensitive location data
Because Doria handles the locations of protected species and the people who report them, access to sensitive records is restricted by role, and wildlife location data is anonymised before it is shared outside the platform.
09 Security
We protect data with role-based access controls, password hashing, encrypted connections, and audit logging. No system is perfectly secure, but we work to keep your data safe.
10 Complaints
If you are concerned about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya, or your local supervisory authority if you are in the EU.
11 Children & automated processing
Doria is a professional tool for conservation organisations and is not directed at children. We do not knowingly collect data from anyone under 18; if you believe a child has given us their data, contact us and we will remove it.
Doria scores and prioritises incoming reports automatically to help teams triage threats. These scores support human decisions — they are not solely-automated decisions that produce legal or similarly significant effects on any individual.
12 Changes to this notice
We may update this notice as the platform evolves. Material changes will be reflected in the "Last updated" date at the top of this page.