Overview & Introduction

KindNest Care Foundation ("KCF", "we", "us", or "our") is a registered humanitarian non-governmental organisation based in Nigeria, dedicated to the welfare of vulnerable children, families, and communities. We operate the website kindnestcarefoundation.com and associated digital platforms.

This Privacy Policy explains how we collect, use, store, share, and protect personal information provided to us through our website, membership portal, donation platform, volunteer registration forms, and any other channels through which you interact with KCF.

By accessing our website or submitting your information to us, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please refrain from using our website or services.

This policy is governed by the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation (NDPR) 2019, and where applicable, internationally recognised data protection principles.

Personal Data We Collect

We collect personal data only when it is necessary, relevant, and adequate for the specific purposes outlined below. The categories of personal information we may collect include:

2.1 Information You Provide Directly

• Full name and contact details (email address, phone number, WhatsApp number)
• Postal or residential address (for correspondence or fieldwork coordination)
• Date of birth and gender (for membership and programme eligibility purposes)
• Occupation, employer, and professional background (membership registration)
• Payment and donation information (processed via Paystack — see Section 12)
• Volunteer skills, availability, and experience
• Photographs and video content submitted voluntarily for publication
• Written correspondence, feedback, and enquiries sent to us
• Social media handles shared during registration or communication

2.2 Information Collected Automatically

• IP address and approximate geographic location
• Browser type, device model, and operating system
• Pages visited, time spent on each page, and navigation paths
• Referral source (how you arrived at our website)
• Cookie identifiers and session data (see Section 6)

2.3 Information from Third Parties

• Donation records and transaction references from Paystack
• Publicly available information from social media platforms when you engage with our official pages
• Referral information from partner organisations or member referrals

How We Use Your Personal Data

KCF uses personal data strictly for the following purposes:

Purpose	Data Used	Legal Basis
Membership registration and management	Name, contact, DOB, occupation	Contract / Consent
Processing donations and issuing acknowledgements	Name, email, payment reference	Contract / Legal obligation
Coordinating volunteer activities and outreach	Name, phone, location, skills	Legitimate interest / Consent
Sending newsletters and programme updates	Name, email	Consent
Responding to enquiries and support requests	Name, email, phone	Legitimate interest
Improving our website and digital services	Usage data, cookies	Legitimate interest
Publishing impact stories and community updates	Name, photos (with consent)	Consent
Compliance with legal and regulatory requirements	Relevant data as required	Legal obligation

We will never use your personal data for purposes incompatible with those stated above without first obtaining your explicit consent.

Legal Basis for Processing

Under the Nigeria Data Protection Act 2023, we rely on one or more of the following legal bases when processing your personal data:

1. Consent — you have given us clear, informed, and freely given consent to process your data for a specific purpose (e.g. subscribing to our newsletter).
2. Contract — processing is necessary to fulfil a contractual obligation with you (e.g. membership agreement or volunteer arrangement).
3. Legal Obligation — we are required by law to collect or retain certain data (e.g. financial records for regulatory compliance).
4. Legitimate Interests — processing is necessary for KCF's legitimate operational interests (e.g. website analytics, internal communications) provided these interests do not override your fundamental rights and freedoms.
5. Vital Interests — in emergency or welfare situations where processing is necessary to protect a person's life or safety.

Data Sharing & Disclosure

KCF does not sell, rent, or trade your personal data. We may share information in the following limited circumstances:

5.1 Service Providers

We work with trusted service providers who assist in our operations under strict data processing agreements:

• Paystack — payment processing for donations (governed by Paystack's Privacy Policy)
• WordPress / hosting provider — website hosting and content management
• Email and communication platforms — for newsletters and notifications
• WhatsApp Business — for member and enquiry communications

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority in Nigeria or in jurisdictions where our partners operate.

5.3 Organisational Transfers

If KCF merges with, is acquired by, or transfers its operations to another entity, your data may be transferred as part of that transaction, subject to the same privacy protections.

5.4 Aggregate & Anonymised Data

We may share aggregated, anonymised statistical data (e.g. "500 families reached in 2025") for reporting, media, and impact communication purposes. This data cannot be used to identify you.

Cookies & Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, analyse traffic, and remember your preferences. Cookies are small text files placed on your device by your browser.

6.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for the website to function (navigation, forms, security)	Session
Analytics Cookies	Help us understand how visitors use the site (page views, traffic sources)	Up to 2 years
Functional Cookies	Remember your preferences such as language or form inputs	Up to 1 year
Third-Party Cookies	Set by embedded tools (e.g. Paystack checkout, social share buttons)	Varies

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. Most modern browsers allow you to:

• View and delete cookies stored on your device
• Block all cookies or only third-party cookies
• Set alerts when cookies are being set
• Browse in private/incognito mode to prevent cookies being stored

For detailed guidance, visit www.aboutcookies.org.

Data Security

KCF takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These include:

• Secure HTTPS encryption across our website
• Access controls limiting data to authorised personnel only
• Regular security updates and software patches
• Staff awareness and training on data handling best practices
• Secure processing via PCI-compliant payment gateways (Paystack)

7.1 Data Breach Response

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, KCF will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware and will inform affected individuals without undue delay, in accordance with the NDPA 2023.

Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. The following general guidelines apply:

Data Category	Retention Period	Reason
Membership records	Duration of membership + 5 years	Organisational history and legal compliance
Donation and payment records	7 years	Financial and tax regulatory requirements
Volunteer records	3 years after last activity	Programme coordination and impact reporting
Newsletter subscribers	Until unsubscribe + 90 days	Communication preference management
Website analytics	Up to 26 months	Traffic analysis and service improvement
General correspondence	3 years	Dispute resolution and operational records

After the applicable retention period, data is securely deleted or anonymised.

Your Data Rights

Under the Nigeria Data Protection Act 2023 and applicable regulations, you have the following rights regarding your personal data held by KCF:

Children's Privacy

KindNest Care Foundation works directly with children as beneficiaries of our humanitarian programmes. We are deeply committed to protecting the privacy and dignity of every child we serve.

• We do not collect personal data from children under 13 years of age directly through our website without verifiable parental or guardian consent.
• Photographs and videos of children involved in our programmes are only collected and published with the express written consent of their parents or guardians.
• Where photographs are used for programme documentation or media purposes, we take all reasonable measures to protect the identities of vulnerable minors, including pixelation where appropriate.
• Programme data relating to child beneficiaries (e.g. school enrolment, feeding programme participation) is stored separately, with access restricted to authorised programme staff only.
• No personal data of child beneficiaries is ever shared with third parties for commercial purposes.

Third-Party Links & Platforms

Our website may contain links to third-party websites, social media platforms, and external resources including:

• Paystack donation portal (paystack.shop)
• Facebook, Instagram, and other social media pages
• WhatsApp Business communications
• Partner organisations' websites

KCF is not responsible for the privacy practices of these external platforms. Once you leave our website, this Privacy Policy no longer applies. We strongly encourage you to review the privacy policies of any external sites you visit. Each third-party platform operates under its own independent data protection framework.

Donations & Payment Processing

All donations made through the KindNest Care Foundation website are processed via Paystack, a PCI DSS-compliant payment gateway. When you make a donation:

• Your payment card details are entered directly on Paystack's secure platform and are never stored on KCF's servers.
• KCF receives a transaction reference, your name, email, and donation amount for our records.
• Donation acknowledgement emails are sent using the email address you provide.
• Your financial data is subject to Paystack's Privacy Policy in addition to this policy.
• Donation records are retained for 7 years for financial regulatory compliance under Nigerian law.

Changes to This Privacy Policy

KCF reserves the right to update or modify this Privacy Policy at any time to reflect changes in our operations, legal obligations, or data protection best practices. When we make material changes:

• The updated policy will be posted on this page with a revised "Effective Date" at the top.
• Where the changes are significant, we will notify registered members and subscribers via email.
• Your continued use of our website or services after the effective date constitutes acceptance of the revised policy.
• Previous versions of this policy are available on request.

We encourage you to review this policy periodically to stay informed about how we protect your personal information.

Contact Us & Data Protection Officer

For all privacy-related enquiries, data subject requests, complaints, or to withdraw your consent, please contact us through any of the following channels:

If you are not satisfied with our response to your privacy enquiry, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.