SUCCOUR FOUNDATION

PRIVACY AND DATA PROTECTION POLICY

Effective Date: April 20, 2025

1. Introduction

At Succour Foundation ("Succour," "we," "our," or "us"), we are committed to protecting the privacy and personal data of everyone who interacts with us—whether as a donor, partner, volunteer, beneficiary, or visitor to our website. We recognize the trust you place in us when you share your information, and we take that responsibility seriously.

This Privacy and Data Protection Policy outlines how we collect, use, disclose, and protect your personal information in accordance with the Nigeria Data Protection Act, 2023 (NDPA) and the Nigeria Data Protection Regulation, 2019 (NDPR).

2. Scope

This Policy applies to all personal information collected and processed by Succour Foundation, including:

• Donations made through our website or partner platforms

• Partnership and sponsorship inquiries

• Volunteer sign-ups and outreach programs

• Email communications, newsletters, and campaigns

• Interactions via our official website or social media platforms

• Events, fundraising activities, and awareness campaigns

By interacting with Succour Foundation, you agree to the terms outlined in this policy.

3. What Information We Collect

We collect the following types of information:

Personal Information

• Name, email address, phone number

• Postal or residential address

• Organization or company name (if applicable)

• Donation history or partnership details

• Communication preferences

Payment Information

• For donations or purchases: details such as cardholder name, donation amount, and payment method. (Note: We do not store card numbers; all payments are processed securely via trusted third-party payment processors.)

Automatically Collected Information

• IP address, browser type, device information

• Pages visited, time spent, and referral source

• Cookie preferences (see Section 10)

4. How We Collect Your Information

We may collect your data through:

• Online donation forms and website submissions

• Event registrations or surveys

• Direct communications (e.g., calls, emails, WhatsApp)

• Newsletter or mailing list subscriptions

• Cookies and analytics tools on our website

• Social media interactions

5. How We Use Your Information

We process your data to:

• Process and acknowledge donations and partnerships

• Send updates, newsletters, or impact reports (if you opt-in)

• Respond to inquiries, feedback, or support requests

• Administer events, campaigns, and fundraising drives

• Improve our services, website, and donor experience

• Fulfill legal obligations and maintain financial records

6. Legal Basis for Processing

Our legal bases for processing data include:

• Consent: When you voluntarily provide your information or subscribe to our updates

• Legal obligation: For accounting, taxation, or compliance with applicable laws

• Legitimate interest: To further our mission, grow support, and manage operations

• Contract: Where processing is necessary to fulfill a partnership or agreement

You may withdraw your consent at any time by contacting us.

7. Information Sharing and Third Parties

We do not sell or rent your personal data. We may share your information only:

• With payment processors (for donations)

• With service providers (e.g., email platforms or IT support), bound by confidentiality agreements

• When required by law or regulatory authority

• With your explicit consent (e.g., in public acknowledgments)

All third parties we engage are obligated to protect your data in line with Nigerian law.

8. Your Rights

Under Nigerian law, you have the right to:

• Access your personal information

• Correct inaccurate or outdated data

• Withdraw your consent at any time

• Request deletion (in certain circumstances)

• Object to certain types of processing

• File a complaint with the Nigeria Data Protection Commission

To exercise any of these rights, email us at privacy@succourfoundation.org.ng

9. Data Security

We implement appropriate security measures to protect your personal information:

• Use of encrypted connections (HTTPS) on our website

• Secure online payment processing via third-party gateways

• Regular review of access controls and user permissions

• Staff and volunteer training on data privacy best practices

• Backups and safeguards against data loss, misuse, or breach

10. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and improve performance. You can:

• Accept or reject non-essential cookies through our cookie banner

• Change cookie preferences in your browser settings at any time

For more details, please see our Cookies Policy (link coming soon).

11. Data Retention

We keep personal data only for as long as needed to fulfill the purposes described in this Policy or as required by law, such as:

• Donation and tax records: up to 7 years

• Volunteer or partner records: as long as the relationship remains active

• Mailing list subscriptions: until you unsubscribe

After this period, data is securely deleted or anonymized.

12. Children’s Privacy

Succour Foundation does not knowingly collect personal information from children under the age of 18 without parental or guardian consent. If we become aware that we have inadvertently received such information, we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Significant changes will be communicated on our website or through email notifications.

The "Effective Date" at the top indicates when the policy was last revised.

14. Contact Information

If you have any questions, concerns, or requests regarding your privacy or this policy, please contact:

Data Protection Officer
Succour Foundation
Abuja, Nigeria
Email: privacy@succourfoundation.org.ng

You may also contact:
Nigeria Data Protection Commission (NDPC)
Website: https://ndpc.gov.ng

15. Acknowledgment

By interacting with Succour Foundation, donating via our website, joining our mailing list, or engaging in our programs, you acknowledge that you have read and understood this Privacy Policy.