1. Who we are
The John Bepeh Foundation (“JBF”, “we”, “us”) is a non-governmental organisation registered with the Corporate Affairs Commission (CAC) in Nigeria under registration number 9790906. We are the data controller for the personal information described in this policy.
We are committed to protecting personal information in line with the Nigeria Data Protection Act 2023 and other applicable law. If you have any questions about this policy or how we handle your information, email us at johnbepehfoundation@gmail.com.
2. What this policy covers
This policy explains how we handle personal information collected through this website, including the forms you can submit and emails you send us. Some of our programmes, such as scholarships, may give you a separate privacy notice when you apply; that notice will explain any additional information collected for the programme.
3. Information we collect
We only collect the information you choose to give us through our forms or by email:
- Contact form: your name, email address, phone number (optional), subject and message.
- Volunteer registration: your first and last name, email address, phone number, city or community, the areas you would like to help with, your availability, your skills or profession (optional), why you would like to volunteer, and your confirmation of our volunteer terms.
- Partnership and sponsorship enquiries: your organisation, name, job title (optional), work email, phone number (optional), the type of enquiry and your message.
- Emails you send us directly, and any information you include in them.
- Technical information: like any website, our hosting provider and the services that deliver images to your browser process your IP address and basic browser details so that pages can be delivered securely.
4. What we don’t collect
- We do not take payments or ask for bank or card details on this website.
- We do not use analytics, advertising or tracking cookies. We store one item on your device to remember that you have seen our cookie notice — see our cookie policy.
- You do not need an account to use this website.
5. How we use your information
We use your information only for the purpose you gave it to us, relying on the lawful bases allowed by the Nigeria Data Protection Act 2023:
- To respond to your enquiry — because you asked us to, and it is in our legitimate interest to reply.
- To review volunteer registrations, match volunteers to suitable roles and carry out appropriate screening — based on the consent you give on the form and our legitimate interest in running safe programmes.
- To discuss partnership, sponsorship and donation enquiries — in our legitimate interest, and to take steps before entering into any agreement with you.
- To send you an automatic email confirming that we have received your submission — in our legitimate interest in keeping you informed.
- To keep the website secure and protect our forms from spam — in our legitimate interest.
- To comply with our legal and regulatory obligations.
6. How we don’t use your information
We do not sell, rent or trade personal information. We will not add you to marketing or newsletter emails unless you separately agree, and we do not make decisions about you using automated processing.
8. International transfers
Some of our service providers process information outside Nigeria: Brevo stores data in the European Union, and Google Firebase stores our form submissions in the United States. Where information is transferred outside Nigeria, we use providers that apply appropriate security and data protection safeguards, as required by the Nigeria Data Protection Act 2023.
9. How long we keep it
- General enquiries: up to two years after our last correspondence with you.
- Volunteer registrations: for as long as you volunteer with us and up to two years afterwards. Registrations that do not lead to a volunteering role are deleted after 12 months.
- Partnership and sponsorship enquiries: up to two years after our last contact, or for as long as required by law if an agreement or donation follows.
10. Children
Our website forms are intended for people aged 18 or over. If you are under 18, please ask a parent or guardian to contact us on your behalf. Information about children taking part in our programmes is handled with additional safeguards, and we never publish identifiable images or stories of children without appropriate permission — see our child photography and consent policy.
11. Keeping your information secure
Access to personal information is limited to authorised people who need it to do their work. This website uses encrypted connections (HTTPS), and we choose service providers that apply appropriate security measures. If a personal data breach occurs, we will act promptly and notify the Nigeria Data Protection Commission and affected individuals where the law requires.
12. Your rights
Under the Nigeria Data Protection Act 2023 you have the right to:
- Be informed about how your information is used.
- Access the personal information we hold about you.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to delete your information, or to restrict how we use it.
- Object to our use of your information.
- Receive your information in a portable format.
- Withdraw your consent at any time, without affecting anything we did before you withdrew it.
13. Exercising your rights or raising a concern
To make a request, email johnbepehfoundation@gmail.com. We may need to confirm your identity before responding, and we will reply within the time required by law.
If you are unhappy with how we have handled your information, please contact us first so we can try to put things right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).
14. Changes to this policy
We may update this policy from time to time, for example if we introduce new forms or services. The “Last updated” date at the top of this page shows when it was last changed.