Privacy Policy

1. Introduction

HEND Foundation ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable data protection laws.

By using our website and services, you consent to the practices described in this Privacy Policy.

2. Data Controller Information

If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection Officer.

3. Information We Collect

We collect personal information that you voluntarily provide to us when you:

• Make a donation through our website
• Sign up for our newsletter or updates
• Register for events or programmes
• Contact us via email or our contact form
• Make a purchase from our shop
• Apply to volunteer or partner with us

3.1 Personal Information

• Identity Data: Name, title, date of birth
• Contact Data: Email address, phone number, postal address
• Financial Data: Payment information (processed securely by our payment providers)
• Transaction Data: Details about donations and purchases you make
• Technical Data: IP address, browser type, device information
• Usage Data: How you use our website and services

4. Legal Basis for Processing (NDPR Compliance)

Under the Nigeria Data Protection Regulation, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal Obligation: Processing is necessary for us to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests
• Public Interest: Processing is necessary for the performance of a task carried out in the public interest

5. How We Use Your Information

We use your personal data for the following purposes:

• To process your donations and send you receipts
• To communicate with you about our programmes, events, and impact
• To respond to your inquiries and provide customer support
• To send you newsletters and updates (with your consent)
• To comply with legal and regulatory obligations
• To improve our website and services
• To prevent fraud and ensure security
• To administer events and programmes you register for

6. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with:

• Service Providers: Payment processors (Paystack, PayPal), email service providers, IT support
• Professional Advisers: Lawyers, auditors, insurers when necessary
• Regulatory Authorities: When required by law or to protect our rights
• Partner Organizations: Only with your explicit consent for specific programmes

All third parties are required to respect the security of your personal data and to treat it in accordance with the law.

7. International Data Transfers

Some of our service providers may be located outside of Nigeria. When we transfer your personal data internationally, we ensure that:

• The country has adequate data protection laws (adequacy decision)
• Appropriate safeguards are in place (such as Standard Contractual Clauses)
• The transfer is necessary for the performance of a contract or with your consent

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against:

• Unauthorized access, alteration, or disclosure
• Accidental or unlawful destruction or loss
• Unlawful processing

These measures include encryption, secure socket layer (SSL) technology, regular security assessments, and staff training on data protection.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Generally, we retain:

• Donation records: For 7 years (for tax and accounting purposes)
• Contact information: Until you request deletion or unsubscribe
• Website usage data: For 12 months

10. Your Rights Under NDPR

Under the Nigeria Data Protection Regulation, you have the following rights:

To exercise any of these rights, please contact our Data Protection Officer using the details provided above.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These include:

• Essential Cookies: Required for the website to function properly
• Analytical Cookies: Help us understand how visitors interact with our website (Google Analytics)
• Functional Cookies: Remember your preferences and settings

You can control cookies through your browser settings. However, disabling cookies may affect your experience on our website.

12. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending you an email notification for significant changes

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have not handled your data appropriately.