PRIVACY NOTICE

1. Introduction

Bamimore Foundation is committed to protecting your privacy and respecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website, contact us, make a donation, express interest in volunteering, participate in our programmes, or engage with us in any other capacity.

We aim to handle personal information responsibly and transparently, in accordance with applicable data protection and privacy laws, including the Nigeria Data Protection Act 2023 and, where applicable, the General Data Protection Regulation (GDPR), the UK GDPR, and relevant United States privacy laws.

By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is legally required for a particular activity, we will request it separately. Using our website does not, by itself, constitute consent to every form of data processing.

2. Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

a. Personal and contact information

Your name, email address, telephone number, organisation, job title, and other contact details you choose to provide through our website or communications.

b. Enquiries and communications

Information contained in messages, contact forms, partnership proposals, volunteer applications, feedback, and other communications you send to us.

c. Donation and contribution information

Information necessary to record, acknowledge, administer, and account for contributions, which may include your name, contact details, contribution amount, date, transaction reference, and relevant payment status.

Where donations are processed through a third-party payment provider, your payment card or banking details may be collected directly by that provider. We do not intend to collect or store complete payment card details on our website.

d. Programme and participation information

Information you provide when registering for our programmes, volunteering, participating in our activities, or applying for support. The information requested will depend on the relevant activity.

e. Technical and website usage information

Information such as your IP address, browser type, device information, pages visited, referral source, approximate location, and interactions with our website, where collected through server logs, cookies, or similar technologies.

f. Photographs, videos, and testimonials

Where applicable, we may collect or use photographs, videos, audio recordings, and testimonials relating to our programmes and activities. Where required, we will obtain appropriate consent or other lawful authorisation before collecting or publishing identifiable material.

Please do not submit sensitive personal information through our website unless it is necessary for a specific purpose and we have provided an appropriate means of collecting it.

3. How We Use Your Information

We may use your personal information to:

– Respond to enquiries, feedback, and requests for information.
– Assess and respond to donation, volunteering, and partnership proposals.
– Receive, administer, acknowledge, and account for contributions.
– Register participants and administer programmes and activities.
– Communicate relevant updates about our work and initiatives.
– Maintain, operate, secure, and improve our website.
– Prevent fraud, misuse, unauthorised access, and other unlawful activities.
– Fulfil applicable legal, regulatory, accounting, and reporting obligations.
– Establish, exercise, or defend legal claims where necessary.

We will not use personal information for purposes incompatible with those for which it was collected unless permitted by applicable law or supported by an appropriate lawful basis.

4. Legal Basis for Processing

We process personal information only where an appropriate legal basis applies. Depending on the circumstances and the law governing the processing, these bases may include:

Consent: Where you have freely agreed to a specific activity, such as receiving optional marketing communications or allowing certain non-essential cookies.

Legitimate interests: Where processing is reasonably necessary for our legitimate organisational interests, such as responding to general enquiries, maintaining website security, or administering relationships, provided those interests do not override your rights.

Contract or requested steps: Where processing is necessary to enter into or perform an agreement with you, or to take steps you request before entering into an agreement.

Legal obligation: Where processing is necessary to comply with applicable laws, including financial, accounting, regulatory, or reporting requirements.

Vital interests or public interest: Where a relevant legal basis applies, such as protecting someone’s life or addressing a matter of public interest.

Where consent is the applicable legal basis, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Donations and Financial Transactions

We may collect information necessary to administer donations and other contributions made to Bamimore Foundation.

Where we use third-party payment processors, your transactions may be subject to the processor’s own terms and privacy policy. We encourage you to review those policies before completing a transaction.

We may retain donation records and transaction references for accounting, audit, fraud prevention, and legal compliance purposes, for as long as reasonably necessary or legally required.

Submitting your information does not automatically subscribe you to fundraising appeals or promotional communications. Where required, we will seek your consent separately.

6. Email Communications and Updates

We may send administrative messages relating to enquiries, donations, programme registrations, partnerships, or other activities you initiate.

We may also send newsletters, fundraising appeals, or information about our initiatives where permitted by law and, where required, with your consent.

You may unsubscribe from optional promotional emails using the unsubscribe link provided or by contacting us. We may still send essential administrative or transactional communications where necessary.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, remember preferences, improve performance, measure website usage, or provide other features.

Cookies may be classified as:

– Essential cookies: Necessary for the website to function or provide a service you request.
– Preference cookies: Used to remember your settings and preferences.
– Analytics cookies: Used to understand how visitors interact with the website.
– Marketing cookies: Used, where applicable, to support advertising or marketing activities.

Where required by law, we will obtain your consent before placing non-essential cookies or activating similar tracking technologies. You may manage your preferences through our cookie settings, where available, and through your browser settings.

Blocking certain cookies may affect website functionality.

The actual cookies and tracking technologies used will depend on the tools installed on our website.

8. When We Share Personal Information

We do not sell personal information in exchange for money.

We may disclose personal information to appropriate recipients where necessary for legitimate organisational purposes, including:

– Service providers: Website hosting providers, email services, cloud storage providers, website maintenance providers, and other technical service providers.
– Payment processors: Third parties that securely process donations or other financial transactions.
– Professional advisers: Accountants, auditors, legal advisers, and other professional service providers where necessary.
– Programme and project partners: Where sharing is necessary for a specific programme, partnership, or service and is supported by an appropriate lawful basis.
– Authorities and regulators: Where disclosure is required by law, a lawful order, or a legitimate legal process.
– Other parties: Where you have consented to the disclosure or another lawful basis permits it.

We expect service providers handling personal information on our behalf to implement appropriate safeguards and use the information only as authorised.

Where applicable, you may have the right to opt out of certain forms of data sharing, targeted advertising, or other activities defined as a sale or sharing under relevant privacy laws. We will honour such rights where those laws apply.

9. International Data Transfers

Bamimore Foundation is based in Nigeria. Some of our service providers, technology platforms, or partners may operate in other countries.

Consequently, personal information may be processed or stored outside Nigeria, including in countries whose data protection laws differ from those of your country of residence.

Where personal information is transferred internationally, we will take steps required by applicable law to ensure that appropriate safeguards are in place. These may include an adequacy decision, contractual protections, or another legally recognised transfer mechanism.

You may contact us using the details provided below to request further information about relevant international transfers and safeguards, subject to applicable legal restrictions.

10. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet applicable legal requirements, resolve disputes, enforce agreements, and maintain appropriate organisational records.

Retention periods will depend on the type of information and the purpose for which it is processed.

For example, enquiry records may be retained for a reasonable period to manage communications and follow-up, while financial records may need to be retained for longer to satisfy applicable accounting or legal obligations.

When information is no longer required, we will take reasonable steps to delete it, anonymise it, or securely dispose of it, subject to applicable law and legitimate recordkeeping requirements.

11. How We Protect Your Information

We implement reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, or destruction.

Depending on the nature of the information and the risks involved, these measures may include access controls, secure connections, appropriate authentication, backups, software updates, and safeguards for third-party service providers.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. We therefore cannot promise absolute security.

Where a personal data breach occurs, we will take appropriate steps to investigate, contain, and address it and make any notifications required by applicable law.

12. Your Privacy Rights

Depending on your location and the laws applicable to the processing of your information, you may have the right to:

– Know whether we process your personal information and obtain access to it.
– Request correction of inaccurate or incomplete information.
– Request deletion of your information in circumstances permitted by law.
– Request restriction of certain processing activities.
– Object to certain processing, including processing based on legitimate interests or certain forms of direct marketing.
– Withdraw consent where processing relies on consent.
– Receive certain information in a portable format or request its transfer to another organisation where legally applicable.
– Challenge certain decisions made solely through automated processing where the law provides that right.
– Lodge a complaint with the relevant data protection authority.

These rights are subject to applicable legal conditions and exceptions. For example, we may need to retain certain information to comply with legal obligations or establish, exercise, or defend legal claims.

To exercise your rights, please contact us using the details in Section 17. We may request reasonable information to verify your identity before responding. We will respond within the time limits prescribed by applicable law.

If you are in Nigeria, you may also lodge a complaint with the Nigeria Data Protection Commission (NDPC), subject to its procedures and jurisdiction.

13. Children’s Privacy

Our website is not intended to collect personal information from children without appropriate safeguards.

As a foundation whose activities may involve children or young people, we recognise the importance of protecting their privacy and dignity. Where our programmes or activities require the collection, use, or publication of children’s personal information, we will take appropriate measures in accordance with applicable law. These may include parental or guardian authorisation, age-appropriate explanations, and additional safeguards where required.

We will not knowingly collect children’s personal information through the website in circumstances where doing so would be unlawful.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can assess the situation and take appropriate action.

14. Photographs, Videos, and Stories of Beneficiaries

Bamimore Foundation respects the dignity, privacy, and rights of individuals who participate in or benefit from our activities.

Where we publish photographs, videos, personal stories, or testimonials for awareness, reporting, fundraising, or educational purposes, we will seek appropriate consent or other lawful authorisation where required and take reasonable steps to avoid unnecessary disclosure of personal information.

We will handle material involving children and vulnerable individuals with particular care. We will not knowingly publish identifying or sensitive information where doing so would be unlawful or create an unacceptable risk to the individual concerned.

Where applicable, you may contact us to ask about the use of identifiable material relating to you or a person you are authorised to represent. Any request will be assessed in accordance with applicable law and relevant recordkeeping obligations.

15. Third-Party Websites and Services

Our website may contain links to third-party websites, platforms, donation services, or social media services.

These third parties operate independently and may have their own privacy policies, terms, and data collection practices. This Privacy Policy does not govern their independent activities.

We encourage you to review the privacy notices of any third-party service you use. The inclusion of a link does not necessarily mean that Bamimore Foundation endorses or controls that service.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, website technologies, legal obligations, or privacy practices.

When changes are made, we will update the “Last Updated” date at the beginning of this policy. Where required by law, we will provide additional notice or seek consent for material changes affecting activities that rely on consent.

We encourage you to review this page periodically to remain informed about how we protect personal information.

17. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how your personal information is handled, please contact us:

Bamimore Foundation
Email: info@bamimorefoundation.org

Please include “Privacy Request” in the subject line of your email so that your enquiry can be directed appropriately.

We will review privacy enquiries and respond in accordance with applicable law. If your concern is not resolved, you may have the right to lodge a complaint with the relevant data protection authority.