Effective date: 21 August 2026
This policy follows Nigeria's Data Protection Act 2023 (NDPA) and international best practice — written for people, not lawyers.
Purpose and scope
We respect your privacy and are committed to protecting your personal data. This policy explains how CITEA (Community Innovation, Technology and Education Advancement) collects, uses, stores and shares personal information through this website and our services. It covers everyone who interacts with us online — donors, volunteers, subscribers and visitors.
Definitions
"Personal data" means any information relating to an identifiable person, such as a name, email, phone number, photo or financial details. "Processing" means collecting, storing, using or sharing personal data. CITEA is a Data Controller under Nigeria's Data Protection Act 2023 (NDPA), which means we decide how and why your data is processed.
Data we collect
- Contact and identity data: name, title, address, email, phone number, gender, date of birth, photograph — collected when you register as a volunteer, partner, subscriber or donor.
- Financial and transaction data: donation amounts, payment method details, billing address — collected when you give or pay for a ticket.
- Volunteer data: CV, professional qualifications, emergency contacts and background-check information — collected when you apply to volunteer or work with us.
- Digital and usage data: IP address, device and browser information, cookies and browsing actions — collected automatically to help us improve the site.
- Communications data: records of correspondence between you and CITEA.
- Sensitive data: we generally do not collect health, race, political or religious data. Where we must (for safeguarding or medical reasons on a project), we obtain explicit consent and handle it with extra care.
Lawful bases for processing
- Consent: for things like newsletters or sharing photos on social media. You can withdraw consent at any time.
- Contract: to process your donation, issue a receipt or arrange your volunteer role.
- Legal obligation: to comply with accounting and tax record-keeping requirements.
- Legitimate interests: to analyse website usage and send service-related updates, provided this does not override your rights.
Third-party processors
We use trusted third parties to deliver services: payment processors to handle donations securely, email services to send newsletters, hosting providers for the website, and analytics services to understand site traffic. We never sell or trade your personal data. Vendors must use data only for CITEA's purposes, secure it appropriately, and delete it promptly when it is no longer needed.
Cookies and tracking
Our website uses cookies and similar technologies. Some are essential to make the site work; others help us understand how people use the site so we can improve it. You can manage or delete cookies at any time in your browser settings. If you prefer not to accept cookies, most of the site still works, though some features may not.
Security measures
We use technical measures (encryption in transit and at rest, firewalls, secure servers) and organisational measures (staff training, strict access controls) to protect your information. Only authorised CITEA staff and contractors can access personal data, and only as far as needed. In the unlikely event of a data breach, we will follow NDPA requirements to notify the Nigeria Data Protection Commission and affected individuals.
How long we keep your data
- Donation records: at least 7 years after the donation, to meet accounting and tax requirements.
- Volunteer records: during your engagement and for 5 years afterwards.
- Contact and subscription data: until you unsubscribe, then minimal records for up to 2 years so we don't accidentally re-add you.
- Communications logs: up to 2 years, unless a longer legal requirement applies.
- Website analytics: aggregated data retained for 2 years; personal identifiers are not stored.
- Legal records: kept as long as the law requires. When data is no longer needed, it is securely deleted or anonymised.
International transfers
Some service providers are located outside Nigeria — for example cloud hosting or email servers in the EU or USA. When we transfer data across borders, we rely on the NDPA's approved safeguards and only transfer to countries or providers with adequate protection, or with your explicit consent where required.
Your rights
- Access: request a copy of the data we hold about you; we respond within 30 days.
- Correction: ask us to update incomplete or incorrect data.
- Erasure: ask us to delete your data where no lawful reason to keep it applies.
- Objection: object to certain processing, such as direct marketing.
- Portability: request a machine-readable copy of your data.
- Withdraw consent: at any time, without affecting processing that already took place.
Making a request or complaint
Email hello@citeaimpact.com with "Data Request" or "Privacy Rights" in the subject line. We respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC).
Children's data
CITEA does not knowingly collect personal data from children under 13 online without parental consent. If you believe we have collected a child's data in error, contact us and we will delete it. In Nigeria, a "child" is under 18 for certain purposes under the Child Rights Act, and parental consent is required for any child's data.
Marketing and opt-out
We send occasional updates about CITEA's work if you opt in. You can opt out at any time — every email contains an unsubscribe link. We never share your email with unaffiliated parties for marketing.
Data Protection Lead
CITEA has appointed a Data Protection Lead. Direct privacy questions or concerns to hello@citeaimpact.com, or write to us at 48 Oniru Street, Odoakpu, Onitsha, Anambra State, Nigeria.
Policy amendments
We may update this Privacy Policy to reflect changes in the law or our practices. If we make significant changes, we will notify you by email or a website notice and update the effective date above.
Contact us
CITEA — Community Innovation, Technology and Education Advancement
48 Oniru Street, Odoakpu, Onitsha, Anambra State, Nigeria
hello@citeaimpact.com · +44 7404 392366