Privacy Policy

Christians in Nigeria Hope and Care Foundation is a non-profit organisation focused on community support, humanitarian assistance, charitable activities, health outreach, and other initiatives undertaken for the benefit of individuals and communities in Nigeria.

Registered/Office Address: Suite WW6, TBS Onikan, Lagos, Nigeria.

Privacy Contact: info@christianhope.ng

Website: christianhope.ng

Depending on your relationship with the Foundation, we may collect:

• Identity information: name, date of birth, gender where relevant, and similar identifying details.
• Contact information: email address, telephone number, postal or contact address, and communication preferences.
• Donation information: donation amount, transaction reference, payment status, and related records. We generally do not store full payment-card details where payments are processed by third-party payment providers.
• Verification information: where required for a lawful purpose, information such as NIN or BVN may be processed to verify identity, prevent fraud, comply with financial or regulatory requirements, or support withdrawal controls.
• Beneficiary and programme information: information reasonably required to assess eligibility, provide assistance, document programme participation, or measure impact.
• Health and outreach information: where voluntarily provided or lawfully collected during health or community programmes, information relevant to screening, consultation, referral, or assistance. Such information may constitute sensitive personal data and will receive appropriate safeguards.
• Volunteer and staff information: application, qualification, availability, emergency-contact, and other information necessary for participation or engagement.
• Technical information: IP address, device and browser information, approximate location derived from technical data, access logs, cookies, and information about interactions with our website.
• Communications: messages, enquiries, feedback, complaints, photographs, or other content submitted to us where relevant.

We may process personal data for purposes including:

• Providing, administering, and improving our charitable, humanitarian, and community services.
• Processing donations, issuing acknowledgements, and maintaining financial and audit records.
• Creating, administering, and monitoring charitable campaigns and assessing campaign or beneficiary requests.
• Conducting identity, fraud, anti-money-laundering, or other compliance checks where required.
• Administering health outreach, community programmes, referrals, and follow-up activities.
• Communicating with donors, beneficiaries, volunteers, partners, and other stakeholders.
• Managing events, volunteers, staff, and programme participants.
• Protecting our systems, users, beneficiaries, and funds against fraud, abuse, unauthorised access, and other security risks.
• Meeting legal, regulatory, accounting, audit, and reporting obligations.
• Producing aggregated or de-identified statistics, reports, and impact assessments.
• With your consent, sending newsletters, campaign updates, or other optional communications.

We process personal data only where there is a lawful basis under applicable data-protection law. Depending on the circumstances, this may include your consent, performance of a contract or arrangement with you, compliance with a legal obligation, protection of vital interests, or a legitimate interest that does not override your applicable privacy rights.

Where we process sensitive personal data, including certain health or biometric or identity-related information, we will apply the additional conditions and safeguards required by applicable law.

Payments and donations may be processed through third-party payment providers. Where a payment provider processes your payment, its own privacy policy and terms may also apply. We may retain transaction references, amounts, dates, payment status, and related accounting information for record-keeping, reconciliation, audit, fraud prevention, and legal compliance.

We do not intend to collect or retain full payment-card credentials such as a complete card number or CVV where those details are handled directly by our payment provider.

Where the Foundation offers fundraising or featured-campaign functionality, information submitted by campaign creators or beneficiaries may be reviewed for authenticity, safeguarding, fraud prevention, and compliance purposes. We may request additional verification before approving a campaign or processing a withdrawal.

Where NIN, BVN, or bank-account information is required for verification, we will use such information only for legitimate verification, compliance, fraud-prevention, and related operational purposes and will limit access to authorised personnel and service providers with a need to know.

We will not publicly display verification credentials such as a full NIN or BVN. Public campaign pages should contain only information appropriate for publication and necessary for the campaign.

Some Foundation activities may involve health screenings, consultations, referrals, or other services that require sensitive information. We will collect only information reasonably necessary for the relevant programme, restrict access, apply appropriate security measures, and avoid unnecessary public disclosure.

Photographs, testimonials, or stories that identify beneficiaries will not be used for publicity where applicable consent or another lawful basis is required, and we will take reasonable steps to respect the dignity, safety, and confidentiality of beneficiaries.

We may disclose personal data to:

• Payment processors, banks, and financial service providers involved in authorised transactions.
• Identity or verification, fraud-prevention, and compliance service providers.
• Technology vendors, hosting providers, communication providers, and other processors that support our operations.
• Professional advisers, auditors, or insurers where reasonably necessary.
• Government, law-enforcement, regulatory, or judicial authorities where required or permitted by law.
• Programme partners or healthcare or service providers where necessary to deliver a requested or authorised service and legally permitted.
• Other parties where you have provided consent or where another lawful basis permits the disclosure.

We require processors and service providers handling personal data on our behalf to apply appropriate confidentiality and security obligations.

We use reasonable technical and organisational measures appropriate to the nature and risk of the personal data we process. These may include access controls, authentication, encryption where appropriate, secure hosting, logging, backups, staff confidentiality obligations, vendor controls, and procedures for detecting and responding to security incidents.

No method of transmission or storage is completely secure. You should therefore avoid sending unnecessary sensitive information through ordinary email or unsecured communication channels.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain accurate records, resolve disputes, prevent fraud, meet legal or regulatory obligations, or establish or defend legal claims.

Retention periods may differ depending on the type of data and the purpose of processing. When data is no longer required, we will take reasonable steps to securely delete, anonymise, or otherwise dispose of it.

Subject to applicable law and any relevant limitations, you may have the right to:

• Be informed about how your personal data is processed.
• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion or erasure in appropriate circumstances.
• Request restriction of processing in appropriate circumstances.
• Object to certain processing, including certain direct-marketing activities.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.
• Complain to the Nigeria Data Protection Commission (NDPC) where you believe your data-protection rights have been infringed.

To exercise a privacy right or raise a data-protection concern, contact us using the privacy contact details below. We may need to verify your identity before fulfilling certain requests. We will respond within the period required by applicable law and may explain where a lawful exception or limitation applies.

Privacy/Data Protection Contact: info@christianhope.ng

Telephone: +234 703 105 5514