Hajiya NafisaFOUNDATION
Legal

Privacy policy

DRAFT: this policy must be reviewed against the NDPR/NDPA (and by counsel if available) before launch. Last updated: July 2026.

Who we are

The Hajiya Nafisa Humanitarian Support Foundation (“the Foundation”, “we”) is a Nigerian non-profit incorporated with the Corporate Affairs Commission (IT No. 7203956), operating hnfoundation.org from Kaduna, Nigeria. For data protection questions or requests, contact [email protected].

What we collect and why

Donors: name, email, donation amount and reference, to issue receipts, answer queries, and (if you opt in) send updates.

Volunteers: contact details, skills, and availability, to match you to assignments.

Applicants and beneficiaries: the information and documents you submit with an application, solely to assess and deliver support. This is the most sensitive data we hold and is treated with the strictest care: access-restricted, retained no longer than needed, never published without written consent.

Website visitors: we use cookieless analytics (aggregate page counts only); we do not track individuals or use advertising cookies.

Legal basis & your rights (NDPR/NDPA)

We process data on the basis of consent, contract (delivering support you requested), and legitimate interest (running accountable programmes).

You may request access to, correction of, or deletion of your personal data, and may withdraw consent at any time, by writing to [email protected]. We respond within 30 days.

Who we share data with

Payment processing: Paystack (we never see or store card details). Transactional email: Resend. We do not sell or rent personal data to anyone.

We disclose data only where required by Nigerian law or to protect a beneficiary's safety.

Security & retention

Data is encrypted in transit and at rest, access is role-restricted and logged, and backups are retained for 30 days. Application data is deleted or anonymised when no longer needed for the programme or legal requirements.