1. Scope & Definitions
This Privacy Policy applies to visitors, donors, beneficiaries, volunteers, partners, and any person interacting with our websites, forms, communications, and donation flows. “Personal information” means data that can identify a person directly or indirectly.
- • Donor: a person or organization providing funds or resources.
- • Beneficiary: a person receiving aid or support.
- • Processing: collecting, storing, using, sharing, or deleting data.
2. Information We Collect
- • Identity & contact: name, email, phone (where needed for receipts, updates, verification, or support).
- • Donation metadata: amount, currency, timestamps, transaction references, payment status (processed by Stripe/Flutterwave).
- • Communications: messages you send to us, support requests, or reports of abuse.
- • Technical data: device/browser signals, IP-derived region (for security, fraud prevention, rate limiting).
- • Program eligibility signals (where relevant): limited information needed to deliver aid fairly and safely.
3. How We Use Information
4. Legal Bases & Global Rights
Depending on your region, our processing may rely on consent, contractual necessity, legitimate interests (such as fraud prevention), and legal obligations. We respect core privacy rights globally, including access, correction, deletion, and objection where applicable.
- • Request access to your data
- • Request correction of inaccurate data
- • Request deletion (subject to legal/audit retention)
- • Withdraw consent (where processing is based on consent)
6. Security & Retention
- • Access controls (least-privilege), audit logs where feasible
- • Encryption in transit; encryption at rest where supported
- • Retention only as long as needed for operations, compliance, and fraud defense
- • Controlled deletion/archiving procedures
7. Children & Vulnerable Persons
We apply extra safeguards when services impact children or vulnerable persons. See Child Safety for prevention and reporting.
8. International Transfers
We may process data in multiple countries due to hosting and service providers. We use contractual and technical safeguards to protect data across borders.
9. Contact & Requests
For privacy requests (access/correction/deletion) or concerns, contact us via the website Contact page. We may request verification to protect you from impersonation and fraud.