Effective date: [June 1, 2025]

1. Introduction

Boys Aid Network (“we”, “us”, “our”) is committed to protecting the privacy of visitors to www.boysaidnetwork.org and of the children, young people, volunteers, donors and partners we work with. This Privacy Policy explains what personal
information we collect, how we use it, with whom we share it, how long we keep it and your rights in relation to that information.

2. Scope

This Policy applies to personal data collected through our website, by email, by telephone, in person at events, and through any of our programmes and fundraising activities in Nigeria and elsewhere in Africa. Where specific legal requirements apply to particular countries, we will follow local law in addition to this Policy. We seek to process personal data in a manner consistent with the Nigeria Data Protection Regulation (NDPR) and related guidance.

3. Personal data we collect

We may collect and process the following categories of personal data:

• Identity data: name, date of birth, gender.
• Contact data: postal address, email address, telephone number.
• Programme data: guardian and emergency contact details, health or safeguarding information that is necessary for participation in our programmes.
• Financial data: donation amounts, payment card or bank details where necessary to process donations (note: payment card processing is handled by third party payment processors; we do not store full card details).
• Technical data: IP address, device and browser type, cookies and usage data when you visit our website.
• Communications data: correspondence you send to us by email, phone or post and records of our communications.

We will only collect data that is necessary for the lawful purposes set out in this Policy.

4. Legal bases for processing

We process personal data only where we have a lawful basis, for example: to fulfil a contract with a donor or supplier; to comply with a legal obligation; to protect the vital interests of a child or individual; where necessary for our legitimate activities as a non governmental organisation such as fundraising, programme delivery or safeguarding; or where you have given your consent. For processing special category or sensitive data (such as health or child protection details) we will rely on lawful grounds permitted by applicable law and will apply additional safeguards.

5. How we use personal data

We use personal data to: provide, administer and improve our programmes; process donations and issue receipts; protect the welfare and safety of children and participants; communicate news, requests and updates where agreed; meet legal, safeguarding and accounting obligations; and to analyse and improve our digital presence.

6. Sharing and disclosure

We will not sell personal data. We may share personal data with:

• service providers who process data on our behalf such as payment processors, email and hosting providers;
• partner organisations and funders where necessary to deliver a programme (with appropriate safeguards);
• law enforcement or regulatory authorities where required by law;
• professional advisors such as auditors or legal advisers when necessary.

Where personal data is transferred outside Nigeria we will ensure an adequate level of protection by contract and safeguards consistent with NDPR requirements.

7. Data retention

We retain personal data only as long as necessary for the purpose for which it was collected and to meet legal, accounting or safeguarding obligations. Retention periods vary by data type and purpose; shorter periods apply to marketing lists, longer periods apply to safeguarding and accounting records.

8. Security

We use appropriate administrative, technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Access to personal data is limited to those who need it for legitimate organisational purposes.

9. Children and working with young people

Where we collect personal data about children or young people, we will take particular care and process such data only where necessary for safeguarding, programme delivery or with parental/guardian consent where required. We will follow sectoral safeguarding standards and applicable law at all times.

10. Cookies and similar technologies

Our website uses cookies to improve performance and to remember preferences. You can control cookies through your browser settings. Our cookie banner describes the cookies in use and how to opt out.

11. Your rights

Where local law gives you rights you may: request access to your personal data, request correction, request erasure, ask us to restrict processing, object to processing and request data portability. To exercise any right or to withdraw consent, contact us using the details below. We will respond within the time required by applicable law.

12. Complaints

If you believe your data has been misused, raise the matter with us first. You may also lodge a complaint with the relevant supervisory authority as provided under applicable law.

13. Contact

Data protection enquiries: [email protected]. For urgent safeguarding concerns contact the telephone number listed on the website.

14. Changes to this Policy

We may update this Policy from time to time. The latest version is published on our website with an updated effective date.