This policy explains how STREETLIGHT Foundation (“we”, “us”) collects, uses, stores, and protects your personal data when you use this website. We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations.
What we collect
We only collect what you choose to provide through the site:
- Contact form: your name, email address, optional subject, and message.
- Volunteer / mentor applications: your name, email, role and areas of interest, an optional message, and your consent.
- Newsletter: your email address (with your confirmation).
- Donations: your email, donation amount, and designation. Card and payment details are handled entirely by our payment processor (Paystack); we never see or store them.
How we use your data
We use your data to respond to your enquiries, process volunteer applications, deliver our newsletter where you have opted in, process and acknowledge donations, and keep records of our charitable activities. We rely on your consent and our legitimate charitable interests as lawful bases under the NDPA.
Payment processing
Donations are processed by Paystack. Your payment information is submitted directly to Paystack and is subject to their privacy practices. We receive only a confirmation, the amount, and your email for receipting.
Storage, retention & security
Submissions are stored in a secured database. We keep personal data only as long as necessary for the purpose it was collected or as required by law, after which it is deleted or anonymised. We apply appropriate technical and organisational measures to protect your data; access is limited to authorised staff.
Your rights under the NDPA
You have the right to access, correct, or request deletion of your personal data; to withdraw consent at any time; to object to or restrict certain processing; and to lodge a complaint with the Nigeria Data Protection Commission. To exercise any of these rights, contact us using the details below.
Cookies
See our
Cookie Policy for how we use cookies and similar technologies.
This policy is a working template and should be reviewed by qualified legal counsel before launch to ensure full NDPA compliance for the Foundation’s specific operations.
