Data We Collect

We may collect the following categories of personal data:

• Identity Data: name, title, date of birth, gender (if relevant).
• Contact Data: postal address, email address, telephone number(s).
• Payment & Donation Data: donation amount, currency, payment method, transaction date, donor reference, and whether through Stripe or another processor. (Note: our payment processor handles payment card details; we only store minimal necessary donor payment metadata.)
• Membership / Volunteer / Beneficiary Data: membership status, volunteer or beneficiary records (skills, talents, resource contributions, support requests, eligibility).
• Usage Data: IP address, browser type, operating system, date/time of visit, referring website, pages visited, time spent on pages, cookies, and tracking technologies as described in our Cookies Policy.
• Communications Data: your communications with us (emails, phone calls, WhatsApp, etc), preferences, complaints, and feedback.
• Sensitive Data (where necessary): e.g., health-related information for healthcare support programmes, or background information for immigration/settlement support. We will collect sensitive data only when strictly necessary, with explicit consent and under heightened security.

How We Use the Data

We will use your personal data for the following purposes:

• To process and manage your donation, membership, volunteer, or beneficiary application or participation.
• To send you information about FFRF’s programmes (education initiatives, healthcare support, business & entrepreneurship support, emergency relief, community development, sports skills development, immigration & settlement) and opportunities to get involved, where you have opted in.
• To communicate with you, respond to enquiries, provide support, and administer our relationship.
• To analyse website usage, improve our website, services, and user experience.
• To comply with our legal obligations and to protect our rights, property, and safety, and the rights, property, and safety of our beneficiaries, volunteers, donors, and other stakeholders.

Legal Basis for Processing (where applicable)

If you are in the European Economic Area (EEA) / EU, or otherwise subject to the General Data Protection Regulation (“GDPR”), we rely on one or more of the following lawful bases:

• Your consent (for example, to receive marketing communications or for the collection of sensitive data).
• Performance of a contract with you (for example, processing a donation or membership).
• Compliance with a legal obligation to which we are subject.
• Our legitimate interests (provided your interests and fundamental rights do not override those interests), such as improving our services, ensuring security, or communicating with donors.
• Where special category (sensitive) data is processed, we may rely on explicit consent or other permitted basis under Article 9 of GDPR.

Disclosure of Data to Third Parties

We may share your personal information with:

• Service providers working on our behalf (e.g., payment processors such as Stripe, IT hosting, email communications, analytics providers).
• Affiliates or partners where you have opted-in and where permitted by law.
• Legal or regulatory authorities, when required by law or to protect our rights.
• Other parties with your consent.

We do not sell your personal data to third parties.

International Transfers

Your personal data may be transferred to and processed in countries other than your country of residence, including countries outside the EEA. In such cases, we will ensure appropriate safeguards (e.g., standard contractual clauses, data-transfer agreements) to protect your privacy rights.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the category of data and purposes (for example, donor transaction records may be retained for [insert number] years, membership/volunteer records for [insert number] years, website usage for a shorter period). After the retention period expires, data is securely deleted or anonymised.

Your Rights

Where applicable under GDPR or other data protection laws, you have the following rights in relation to your personal data:

• Right of access: you can request a copy of the data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): you can request deletion of your data, subject to legal exceptions.
• Right to restrict processing: you can ask us to block or suppress further processing of your personal data.
• Right to data portability: You can request a machine-readable copy of your data in certain cases.
• Right to object: You can object to processing based on legitimate interests, direct marketing, or profiling.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time (this will not affect the lawfulness of processing before withdrawal).
• Right to complain: You may lodge a complaint with your local data protection authority.
• Right to membership/Volunteer: You have the right to discontinue membership or volunteer

Security

We implement appropriate technical and organisational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, encryption where appropriate, regular reviews, and oversight of third-party processors. However, no system is entirely secure and we cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate our website and collect usage information. Please see our Cookies Policy below for details of what types of cookies we use, what we use them for, how you can manage your preferences and opt-out where required.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date will tell you when it was last revised. We encourage you to review this page periodically. We will provide notice of material changes where required by law.

Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: unite@fajiri.org

Office Address: 20 Aba Close, Along Tafawa Balewa Road, Area 8, Garki, Abuja, Nigeria
Unit 43 - 7686 209th Street, Langley, British Columbia V2Y 0R5, Canada

Call Center: +234 904 951 5395
+1 (604) 600-7497