Skip to content
Shades of Bloom Health Awareness Foundation logo

Legal

Privacy Policy

How we collect, use, store, and protect your personal data — in line with the Nigeria Data Protection Act and GDPR principles.

Last updated: August 2026

1. Who we are

Shades of Bloom Health Awareness Foundation is a non-profit health organisation operating at shadesofbloomfoundation.org. We are the data controller for personal information collected through this website. Questions about this policy can be sent to info@shadesofbloomfoundation.org.

2. Information we collect

  • Donation information — name, email, amount, and campaign attribution. Card and bank details are captured by Paystack and never reach our servers.
  • Volunteer and partner applications — contact details, application responses, and any documents you upload.
  • Event registrations — name, email, phone, attendee count, and any accessibility needs you tell us about.
  • Newsletter subscriptions — email address and your recorded consent.
  • Contact enquiries — the details you submit through our contact form.
  • Technical data — anonymised, aggregated analytics about how pages are used.

3. How we use your data

We use personal data to process donations and issue receipts, to review volunteer and partner applications, to manage event registrations, to send communications you have consented to, to respond to enquiries, and to report on our programmes in aggregate form. We never sell personal data.

4. Consent and marketing

Newsletter and marketing communications require explicit double opt-in consent — you confirm your subscription by email before we send anything. Every message includes a one-click unsubscribe link.

5. Data security

All traffic is encrypted in transit using TLS. Sensitive fields are encrypted at rest. Access to personal data is restricted by role, staff accounts with administrative access require two-factor authentication, and all administrative actions are recorded in an append-only audit log.

6. Data retention

Donation records are retained as long as required for financial and regulatory reporting. Volunteer and partner application records are retained for the duration of the relationship and a reasonable period afterwards. Newsletter data is retained until you unsubscribe.

7. Your rights

You may request access to the personal data we hold about you, request corrections, request deletion, withdraw consent for marketing, or request a portable export of your data. Email info@shadesofbloomfoundation.org and we will respond within the timeframe required by applicable law.

8. Third parties

We share only the minimum data necessary with Paystack (our payment processor), our email service provider, and our hosting and media storage providers, each of whom processes data under contract on our behalf.

9. Changes to this policy

Material changes will be published on this page with an updated revision date, and communicated to subscribers where the change affects how their data is used.