Legal
How we collect, use, store, and protect your personal data — in line with the Nigeria Data Protection Act and GDPR principles.
Last updated: August 2026
Shades of Bloom Health Awareness Foundation is a non-profit health organisation operating at shadesofbloomfoundation.org. We are the data controller for personal information collected through this website. Questions about this policy can be sent to info@shadesofbloomfoundation.org.
We use personal data to process donations and issue receipts, to review volunteer and partner applications, to manage event registrations, to send communications you have consented to, to respond to enquiries, and to report on our programmes in aggregate form. We never sell personal data.
Newsletter and marketing communications require explicit double opt-in consent — you confirm your subscription by email before we send anything. Every message includes a one-click unsubscribe link.
All traffic is encrypted in transit using TLS. Sensitive fields are encrypted at rest. Access to personal data is restricted by role, staff accounts with administrative access require two-factor authentication, and all administrative actions are recorded in an append-only audit log.
Donation records are retained as long as required for financial and regulatory reporting. Volunteer and partner application records are retained for the duration of the relationship and a reasonable period afterwards. Newsletter data is retained until you unsubscribe.
You may request access to the personal data we hold about you, request corrections, request deletion, withdraw consent for marketing, or request a portable export of your data. Email info@shadesofbloomfoundation.org and we will respond within the timeframe required by applicable law.
We share only the minimum data necessary with Paystack (our payment processor), our email service provider, and our hosting and media storage providers, each of whom processes data under contract on our behalf.
Material changes will be published on this page with an updated revision date, and communicated to subscribers where the change affects how their data is used.