Privacy Policy

1. About AquaBytes Foundation

AquaBytes Digital and Environmental Development Foundation is a Nigerian foundation committed to creating positive and sustainable impact through digital inclusion, technology education, skills development, environmental sustainability, community development, humanitarian service and related charitable activities.

Our programmes and activities may include digital literacy, technology training, ICT education, innovation, youth and women empowerment, environmental education, pollution prevention, sanitation, recycling, waste management, conservation, community development, educational support and humanitarian initiatives.

As a Christian-oriented foundation, we may also undertake voluntary faith-based activities, Christian outreach, spiritual development, humanitarian service and initiatives intended to restore hope and encourage positive personal and community transformation.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected or processed by AquaBytes Foundation through our website, online forms, programme registration systems, volunteer applications, donation processes, communication channels and other digital or offline interactions where this Privacy Policy is applicable.

This policy does not necessarily apply to websites, applications or services operated by third parties that may be accessible through links on our website. Those services are governed by their own privacy policies and terms.

3. What Is Personal Information?

Personal information means information relating to an identified or identifiable individual or information that can reasonably be used to identify an individual.

Depending on how you interact with us, this may include information such as your name, contact details, identification information, location information, programme information, communication history, preferences and other information that you voluntarily provide or that is lawfully collected in connection with our activities.

4. Information We May Collect

Depending on the services and features you use, we may collect different categories of information.

4.1 Information You Provide Directly

You may provide personal information when you:

• Contact us through a contact form.
• Apply for a programme or training opportunity.
• Register for an event, workshop or community activity.
• Apply to volunteer, mentor or facilitate a programme.
• Make or initiate a donation.
• Subscribe to newsletters or organisational updates.
• Request information or support.
• Submit feedback, testimonials or stories.
• Participate in surveys or research activities.
• Communicate with us through email, telephone or other channels.
• Enter into a partnership or other relationship with the Foundation.

4.2 Technical and Usage Information

When you visit our website, certain technical information may be collected automatically by our website, hosting provider, analytics services or security systems.

This may include:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• General geographic or approximate location information.
• Pages visited.
• Referring website or source.
• Date and time of access.
• Website interaction and usage information.
• Technical logs and security information.

We use this information primarily for website operation, security, troubleshooting, analytics and improvement of our digital services.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide essential functionality, remember preferences, improve website performance, understand website usage and support security.

Depending on the technology implemented on the website, cookies may include essential cookies, analytics cookies, functionality cookies and other categories of cookies.

Where applicable, we will provide users with appropriate information and choices regarding non-essential cookies.

You may also be able to manage cookies through your web browser settings. Disabling certain cookies may affect the functionality of some parts of the website.

6. How We Use Personal Information

We may use personal information for legitimate organisational, charitable, administrative, operational and communication purposes, including:

• Responding to enquiries and requests.
• Managing programme applications and registrations.
• Delivering training, education and community programmes.
• Managing volunteers, mentors, facilitators and programme participants.
• Processing donations and maintaining appropriate financial records.
• Communicating programme updates and organisational information.
• Sending newsletters where you have subscribed or where otherwise permitted by law.
• Managing partnerships and stakeholder relationships.
• Conducting monitoring, evaluation and learning activities.
• Preparing programme reports and impact assessments.
• Improving our website, programmes and services.
• Maintaining website and information security.
• Preventing fraud, abuse, misuse and unlawful activity.
• Complying with legal and regulatory obligations.
• Protecting the rights, safety and legitimate interests of individuals and the Foundation.
• Supporting our charitable, humanitarian, environmental and community-development objectives.

7. Lawful Basis for Processing

Where applicable, AquaBytes Foundation will process personal information on an appropriate lawful basis under applicable data-protection laws.

Depending on the circumstances, the lawful basis may include:

• Consent: where you have voluntarily provided consent for a specified processing activity.
• Performance of an agreement: where processing is necessary to provide a service, programme or other arrangement you have requested.
• Legal obligation: where processing is necessary to comply with an applicable legal or regulatory requirement.
• Legitimate interests: where processing is necessary for legitimate organisational purposes and those interests are not overridden by applicable privacy rights.
• Protection of vital interests: where processing is necessary to protect an individual's vital interests in circumstances recognised by applicable law.

Where consent is relied upon, you may withdraw your consent where applicable. Withdrawal of consent will not necessarily affect the lawfulness of processing carried out before consent was withdrawn.

8. Information Provided for Programmes and Applications

If you apply for or participate in a Foundation programme, we may collect information necessary to assess eligibility, administer the programme, communicate with you, provide services and evaluate programme outcomes.

We will seek to collect only information that is reasonably necessary for the relevant purpose and will handle such information in accordance with applicable privacy and safeguarding requirements.

Providing certain information may be necessary for participation in specific programmes. If required information is not provided, we may be unable to process an application or provide the relevant service.

9. Donations and Payment Information

If our website provides online donation or payment functionality, payment transactions may be processed by third-party payment processors or financial institutions.

Unless expressly stated otherwise, AquaBytes Foundation does not intend to store complete payment-card information on its own website servers.

Payment providers may collect and process information in accordance with their own privacy policies and terms.

We may receive limited transaction information necessary for accounting, reconciliation, donation acknowledgement, reporting, fraud prevention and legal or regulatory compliance.

10. Communications and Newsletters

If you subscribe to our newsletter or other communications, we may use your contact details to send information about our programmes, activities, events, opportunities, publications, campaigns and organisational updates.

You may unsubscribe from non-essential marketing or newsletter communications by using the unsubscribe mechanism provided in the relevant communication or by contacting us.

We may continue to send essential administrative or transactional communications where reasonably necessary.

11. Sharing of Personal Information

AquaBytes Foundation does not sell personal information as a commercial product.

We may share personal information where reasonably necessary with trusted parties such as:

• Technology and website service providers.
• Hosting and cloud-service providers.
• Payment processors and financial institutions.
• Email and communication service providers.
• Programme partners and implementation partners.
• Professional advisers and consultants.
• Auditors and financial service providers.
• Monitoring, evaluation and research partners.
• Government agencies or regulatory authorities where legally required.
• Other service providers acting on our behalf where appropriate.

Where third parties process personal information on our behalf, we seek to use appropriate contractual, organisational and technical safeguards consistent with applicable data-protection requirements.

12. International Data Transfers

Some of our technology, hosting, communication, payment or other service providers may process information in countries outside Nigeria.

Where personal information is transferred internationally, we will seek to implement appropriate safeguards and comply with applicable data-protection requirements relating to international transfers.

International transfers may occur where necessary to provide services, operate digital infrastructure, communicate with users, process transactions or work with international development partners.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling programme, administrative, legal, financial, reporting, safeguarding and regulatory requirements.

Retention periods may vary depending on the nature of the information, the purpose of processing, legal obligations, programme requirements, financial-record requirements and legitimate organisational needs.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy, anonymise or otherwise dispose of it, subject to applicable legal and operational requirements.

14. Data Security

AquaBytes Foundation takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction.

Security measures may include:

• Access controls.
• Password and account security measures.
• Secure hosting and website configuration.
• Encryption or secure transmission where appropriate.
• Security monitoring and logging.
• Staff and volunteer awareness and confidentiality requirements.
• Appropriate controls over third-party service providers.
• Backup and recovery measures where appropriate.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. You should therefore exercise appropriate care when transmitting personal information online.

15. Personal Data Breaches

If AquaBytes Foundation becomes aware of a personal-data breach, we will assess the incident and take reasonable steps to contain, investigate and remediate it.

Where notification is required under applicable law, we will notify the relevant regulatory authority and affected individuals within the applicable requirements and timeframes.

16. Children's Privacy and Safeguarding

Some AquaBytes Foundation programmes may involve children and young people. We recognise the importance of protecting children's personal information and welfare.

Where our activities involve children, we may implement additional safeguarding, consent, parental or guardian approval and data protection procedures appropriate to the activity.

We do not knowingly request unnecessary personal information from children through general website features.

If you believe that a child has provided personal information to us inappropriately or that information relating to a child has been handled improperly, please contact us promptly.

17. Photographs, Videos and Testimonials

AquaBytes Foundation may document programmes and activities through photographs, videos, interviews, testimonials and other forms of media for legitimate organisational, educational, reporting, awareness and communication purposes.

Where consent or another lawful basis is required, we will seek to obtain appropriate permission before collecting or using identifiable personal information for the relevant purpose.

Particular care will be taken with children, vulnerable persons and sensitive programme contexts.

If you have a legitimate concern about an image, video or testimonial published by AquaBytes Foundation, please contact us so that we can review the matter.

18. Social Media and Third-Party Platforms

AquaBytes Foundation may maintain accounts or pages on third-party social media and communication platforms.

When you interact with us through those platforms, the relevant platform may independently collect and process your personal information according to its own privacy policy and terms.

We encourage users to review the privacy settings and policies of third-party platforms before sharing personal information through them.

19. Third-Party Websites and Links

Our website may contain links to third-party websites, applications, payment platforms, educational resources, partner organisations, government websites, social media platforms and other external services.

AquaBytes Foundation is not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party service before providing personal information to it.

20. Your Data Protection Rights

Subject to applicable law and any relevant limitations, individuals may have rights concerning their personal information.

These rights may include:

• The right to be informed about the processing of personal information.
• The right to request access to personal information we hold about you.
• The right to request correction of inaccurate or incomplete information.
• The right to request deletion of personal information where applicable.
• The right to request restriction of certain processing activities.
• The right to object to certain processing activities where applicable.
• The right to withdraw consent where processing is based on consent.
• The right to request portability of personal information where applicable.
• The right to lodge a complaint with the appropriate data-protection authority.

These rights are not absolute and may be subject to legal, regulatory, contractual or other legitimate limitations.

21. How to Exercise Your Privacy Rights

If you wish to exercise a data-protection right or ask a question about how your personal information is processed, please contact us using the details provided in the Contact Us section of this Privacy Policy.

To protect personal information, we may need to verify your identity before responding to certain requests.

We will respond to valid requests within the timeframe required by applicable law, subject to any lawful exceptions or limitations.

22. Accuracy of Personal Information

We rely on the information provided by individuals to maintain accurate records.

Please notify us if information you have provided changes or if you believe that information held by us is inaccurate or incomplete.

23. Data Minimisation

AquaBytes Foundation seeks to collect and process personal information that is reasonably relevant and necessary for the purposes for which it is collected.

We encourage users not to submit unnecessary sensitive or confidential information through general contact forms, public comment areas or other website features unless specifically requested for a legitimate purpose.

24. Confidentiality

Information provided to AquaBytes Foundation may be treated as confidential where appropriate and where required by the nature of the relationship or applicable law.

However, information should not be submitted through publicly accessible website features with the expectation that it will remain confidential.

25. Changes to This Privacy Policy

AquaBytes Foundation may update this Privacy Policy from time to time to reflect changes in our activities, technology, services, legal requirements or data-processing practices.

When changes are made, the revised Privacy Policy will be published on this page and the "Last Updated" date will be changed accordingly.

We encourage you to review this page periodically to remain informed about how we handle personal information.

26. Governing Law and Regulatory Framework

This Privacy Policy is intended to operate in accordance with the applicable laws and data-protection requirements of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023, as applicable to our activities and processing operations.

Where applicable, we will also consider other mandatory privacy and data-protection requirements that apply to particular programmes, partners, jurisdictions or categories of individuals.

27. Complaints and Data Protection Concerns

We encourage individuals to contact AquaBytes Foundation first where they have questions or concerns about how their personal information has been handled so that we can investigate and seek to resolve the matter appropriately.

Nothing in this Privacy Policy prevents an individual from exercising any right to complain to a competent data-protection authority where permitted by applicable law.

In Nigeria, the relevant national data-protection regulator is the Nigeria Data Protection Commission (NDPC).

28. Contact Us

If you have questions about this Privacy Policy, wish to exercise a data-protection right, have a privacy concern, or require further information about our processing activities, please contact AquaBytes Digital and Environmental Development Foundation.

Phone: 0803 059 1740, 0805 555 4435

Privacy Contact: YOUR-PRIVACY-EMAIL

Website: AquaBytes Foundation

29. Privacy Policy Acknowledgement

By using the AquaBytes Foundation website and voluntarily providing personal information to us, you acknowledge that you have had the opportunity to review this Privacy Policy and understand how your information may be processed as described herein.

Where applicable, we will request consent or provide appropriate choices before undertaking processing that requires consent under applicable law.