Donate

How we look after your information

We collect only what we need to reply to you, organise outreaches and send the updates you ask for. We never sell it.

Last updated

Who we are

Nunayon Foundation ("we", "us") is a charitable foundation based in Lagos, Nigeria. We decide how the information you give us through nunayonfoundation.org is used, which makes us the data controller under the Nigeria Data Protection Act 2023.

You can reach us about anything in this policy at hello@nunayonfoundation.org, or by post at 12 Placeholder Street, Ikeja, Lagos.

What we collect

We only collect what you choose to send us through a form on this site:

  • Contact and partnership messages: your name, email, optional phone number, organisation and your message.
  • Volunteer sign-ups: your name, email, phone, state, the roles you're interested in, your availability and anything else you tell us.
  • Donation notices: your name, email, the amount, the date of the transfer and the programme you chose. We never ask for card or bank login details.
  • Newsletter sign-ups: your email address and the date you confirmed it.

We also keep a simple record of when each form was sent, and use privacy-friendly visitor statistics that do not identify you (see below).

Why we use it

We use your information to:

  • reply to your message and keep a record of our conversation;
  • match your donation to the transfer we receive and send your receipt;
  • place you on outreaches that suit your skills and availability;
  • send the newsletter, only after you confirm your address.

Our legal basis is your consent (newsletter), taking steps you asked for (replying, receipts, volunteering), and our legitimate interest in running the foundation well (records and security). You can withdraw consent at any time.

Who else sees it

We never sell, rent or trade your information. A small number of trusted services process it on our behalf, under contracts that require them to keep it safe:

  • Vercel, which hosts this website and provides our visitor statistics;
  • Supabase, which stores form submissions and newsletter sign-ups (servers in the European Union);
  • Cloudflare, which manages our domain and checks forms are sent by people, not bots (Turnstile);
  • our email provider, which delivers our replies and the newsletter.

Some of these services store data outside Nigeria. Where they do, we rely on the safeguards allowed under the Nigeria Data Protection Act, such as contractual protections. We'll share information with authorities only when the law requires it.

Visitor statistics

We count page visits with Vercel Web Analytics. It does not use cookies, does not follow you across other websites and does not store your IP address. We see totals such as the most-read pages and the countries visits come from, never who you are.

How long we keep it

  • Messages and volunteer sign-ups: up to two years after our last contact with you.
  • Donation records: six years, as Nigerian tax and accounting rules require.
  • Newsletter: until you unsubscribe. Every newsletter has a one-click unsubscribe link.

After that we delete it, or keep it only in a form that no longer identifies you.

Keeping it safe

Information travels to us encrypted (HTTPS) and is stored with access limited to the few team members who need it. Their accounts are protected with strong passwords and, for administrators, a second sign-in step. Every change in our admin area is logged.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

  • show you the information we hold about you;
  • correct anything that is wrong;
  • delete your information, unless the law requires us to keep it;
  • stop or limit how we use it, or send it to you in a portable format;
  • stop sending you the newsletter.

Email hello@nunayonfoundation.org and we'll respond within 30 days. If you're unhappy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Children

This website is not meant for children under 18 to send us information. Photos of children on this site are used with the permission of a parent or guardian, and we never publish a child's full name or exact location.

Changes to this policy

If we change how we use your information, we'll update this page and the date at the top. If the change is significant, we'll tell newsletter subscribers by email.