Personal Identification
Details you provide when reaching out or submitting applications:
Data Protection & Privacy
Clear protection for your personal information.
We believe digital trust is as vital as financial stewardship. This policy explains how Friends of God Foundation collects, handles, safeguards and respects your data across our platforms.
01Foundation scope
Scope of this Privacy Policy
Applies to applicants, donors, volunteers, partners and visitors across all digital touchpoints.
Who we are and what this covers
This policy covers all interactions with the Friends of God Foundation website, application portals, donation workflows and volunteer management systems. By using our website and digital services, you acknowledge the collection and handling of information described here.
02Collected data
Information we collect and why
We collect information needed to deliver services, secure the website and understand aggregate website use.
Contributions & Transactions
Records associated with donations and assistance files:
Technical & Usage Data
Technical details generated when accessing our site:
First-party website analytics
When you browse public pages, our first-party collector records the normalized page route, visit time, estimated foreground engagement, referring website hostname, broad screen category and a randomly generated tab-session identifier held in your browser's session storage. The identifier is hashed before it is stored. This analytics table does not store IP addresses, full referrer URLs, query strings, device models or form contents. The figures are approximate session counts, not identified people, and are visible only to authorized administrators. Expired rows are pruned after 90 days when the collector or report runs; visits from before deployment are not backfilled.
Separate existing script: Public pages also currently load a Google Analytics tag. That script may independently send website-usage information to Google under Google's privacy practices. The first-party collector described above is separate and does not forward its event records to Google.
Public team and volunteer portraits
Staff and volunteers can choose whether their profile photo appears on our public team or volunteer pages. Public staff cards show a name, role and department; volunteer cards show a first name and, where available, an interest area and year joined. Phone numbers, email addresses and other contact details are not displayed. A person can withdraw this choice from their profile; the public listing and portrait endpoint then stop serving the photo.
03Collection methods
How information is gathered
Transparent channels used to receive and verify your records.
| Collection Channel | Categories of Information | Purpose & Justification |
|---|---|---|
| Direct Submissions | Application forms, contact inquiries, volunteer registrations | Reviewing assistance requests, scheduling interviews and maintaining correspondence |
| Payment Gateways | Payment confirmation tokens, transaction references (cards tokenized by Paystack/Stripe) | Issuing electronic receipts, accounting verification and preventing fraudulent transactions |
| System & Security Logs | Session cookies, access IP addresses, device identifiers | Protecting admin systems, mitigating cyber threats and analyzing platform performance |
04Security controls
How we safeguard your information
Enterprise encryption, access control and strict confidentiality standards.
Technical and operational safeguards
All web traffic is transmitted via high-grade TLS/SSL encryption. Sensitive documents uploaded during assistance reviews are isolated behind access-controlled storage directories with script execution disabled. Internal access to application records is strictly restricted to authorized staff and verified caseworkers under confidentiality agreements.
05Your control
Your rights as a data subject
You have full ownership and legal rights regarding the information you share with us.
Right of Access
You can request confirmation of whether we hold personal data about you and obtain a copy of that information.
Right to Rectification
You can request correction of incomplete or outdated personal information at any time.
Right to Erasure
Subject to statutory record-retention requirements, you may ask us to delete your personal data.
Right to Object
You have the right to withdraw consent or object to processing for direct communication purposes.
Privacy Enquiries
Have questions about your data?
Our Data Protection and Compliance team is available to answer any questions or process data subject access requests.