Privacy policy

This website is run by Gerald Nwoye Healthcare Global Initiative (Gerald Nwoye Foundation), a non-profit, non-political organisation registered in Nigeria in 2014. Our office is at 704D Babatunde Atere, Omole Phase 2, Ikeja, Lagos, Nigeria, and our headquarters is in Abuja, Nigeria.

We are responsible for the personal information described here. Questions about it go to info@geraldnwoyefoundation.org.

We only collect what you give us or what the site needs to work:

• When you donate: your name, email address, optional phone number, the amount, how often you give, the campaign, and any note or dedication you add. You can choose to give anonymously, which hides your name from public lists.
• When you create an account: your name, email address and a password, which is stored only as a secure hash. You can add a phone number.
• When you subscribe to our newsletter: your email address, your name if you give it, and where you signed up.
• When you contact us, volunteer, partner with us or reply to an event: the details you type into that form.
• Your IP address, kept for about an hour when you use one of our forms so we can stop abuse, plus the basic technical records our hosting provider keeps to run the site securely.

We never see or store your card details. Payments are handled entirely by Paystack.

• To process your gift, send your receipt, and manage any regular gift you set up.
• To keep accurate financial records, as a registered organisation must.
• To reply to your message, volunteer offer, partnership enquiry or event reply.
• To run your account, so you can see your giving history and download receipts.
• To send our newsletter if you subscribed, and occasional updates to people who have given or have an account. Every one of these emails has an unsubscribe link.

We do not sell, rent or trade your information, and we do not use it for advertising.

We use a small number of trusted providers to run the site. They only process your information on our behalf:

• Paystack, to take payments and manage regular gifts.
• Supabase, to store our database and accounts securely.
• Resend, to deliver receipts, account emails and newsletters.
• Cloudflare, to host the website and protect it from attacks.

Some of these providers store data outside Nigeria. We choose providers that protect data to a high standard. We will also share information if the law requires it.

We only use cookies the site needs, and one optional preference cookie. There are no advertising or tracking cookies.

• Keeping you signed in (essential).
• Showing your gift on the thank-you page after payment (essential).
• Remembering your cookie choice (essential).
• Remembering light or dark mode (preference). If you choose Essential only, this lasts until you close your browser.

We keep donation records and receipts for as long as the law requires us to keep financial records. We keep account details while your account is open. We keep newsletter details until you unsubscribe, and messages for as long as we need them to help you.

Under the Nigeria Data Protection Act 2023 you can:

• Ask for a copy of the information we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your information, unless we must keep it by law (for example, donation records).
• Stop our emails at any time, using the link in any email or our email preferences page.
• Complain to the Nigeria Data Protection Commission if you are unhappy with how we handle your information.

To use any of these rights, email info@geraldnwoyefoundation.org. We aim to reply within 30 days.

Passwords are securely hashed and never stored as written, the site is served over HTTPS, and only authorised foundation staff can see donor and subscriber details in our dashboard.

If we change how we use your information, we will update this page and the date at the top.