Haleyouth

Privacy Policy

Last updated: May 2026

1. Data Controller

Haleyouth Foundation (CAC RC - 138260), a registered Nigerian non-profit, is the data controller responsible for personal information collected via this website. You can reach our team at info@haleyouthfoundation.org or by post at Ateba Agassa-Okene, Kogi State 263101, Nigeria.

2. What We Collect

  • Form submissions— name, email address, phone number, message content, and any other information you choose to share through our contact, volunteer, partnership, donation, and newsletter forms.
  • Donor records— for donations, we additionally retain the amount, currency, allocated program, and payment method you indicate.
  • Analytics data— Google Analytics 4 via Firebase collects pseudonymous data such as pages viewed, approximate device, browser, IP-derived location, and referring URL through cookies (see §7).
  • Server logs— our hosting provider (Firebase Hosting) records standard access logs (IP, timestamp, requested URL) for security and operations.

3. How We Use Your Data

We use the information you provide to respond to your inquiries, process donations and issue receipts, manage volunteer and partner applications, and send newsletter updates where you have opted in. Analytics data is used in aggregate to understand how the site is used and to improve content and accessibility. We do not sell your data, and we do not share it with third parties for their own marketing.

4. Legal Basis for Processing

We process personal data under the Nigeria Data Protection Regulation (NDPR) and, where applicable to visitors from the European Economic Area, the General Data Protection Regulation (GDPR). The legal bases we rely on are: your consent (when you submit a form, subscribe to the newsletter, or accept analytics cookies), performance of an agreement (when you make a donation), and legitimate interest (to operate, secure, and improve the website).

5. Third-Party Processors

We share personal data only with the service providers we rely on to operate the site and our programs. Each provider is bound by their own data-protection terms:

  • Google & Firebase— hosting, Firestore database, Firebase Authentication, and Google Analytics 4.
  • Payment processors— for online donations, payments are handled by regulated providers such as Paystack and Stripe. We do not see or store your full card details.
  • Guaranty Trust Bank— for direct bank-transfer donations to our Naira and domiciliary accounts.

6. Data Retention

Contact and volunteer form submissions are retained for up to 24 months after our last interaction with you. Analytics data is retained for 14 months by default in Google Analytics 4. Donor records, including donation receipts, are retained for a minimum of 6 years to satisfy Nigerian non-profit financial-record obligations. You may request earlier deletion subject to those legal requirements.

7. Cookies

We use a small number of cookies. Strictly necessary cookies keep the site working and remember your cookie-consent choice. Optional analytics cookies set by Google Analytics 4 / Firebase (_ga, _ga_<ID>) help us understand site usage. Analytics cookies are only set after you accept them via the consent banner shown on first visit; you can change your choice at any time by clearing site data in your browser, or by using the Google Analytics opt-out browser add-on.

8. Your Rights

Under the NDPR (and GDPR where applicable) you have the right to access your personal data, request correction or deletion, object to processing, withdraw consent, request portability, and lodge a complaint with the supervisory authority. In Nigeria, the supervisory authority is the Nigeria Data Protection Commission (NDPC, formerly NITDA). To exercise any of these rights, email us at info@haleyouthfoundation.org and we will respond within 30 days.

9. Children

Our programs serve young people, but this website is directed at adults (donors, volunteers, partners, and guardians). We do not knowingly collect personal data from children under 13 through the website. If you believe a child has provided personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced on the site.