Privacy Policy
What this website collects, why, and who can see it.
Draft for the foundation to review
This page describes what the website does. Items in [square brackets] are decisions or legal details only the foundation can supply. Please review it, ideally with a legal adviser, before launch.
Who is responsible
Tallafawa Gwamraye da Marayu Foundation (Foundation for Widows and Orphans). [Registration details: to be provided] You can reach the foundation through the contact form; [Email: to be provided].
What we collect
- When you donate: your full name, email address and phone number; the amount; an optional message; your choices about being shown publicly (anonymous, show my donation, and an optional display name); and the payment reference and status.
- When you write to us: your name, email address, optional phone number, subject and message.
- Staff sign-ins: an administrator’s email address and, in a security log, the network address used for sign-in attempts and actions.
- We do not store your IP address with donations or contact messages. Network addresses are used briefly in the server’s memory to limit abuse and are not written to the donor database.
Payments
Payments are made on Paystack’s own secure page. We never see or store your card number, CVV, PIN or bank login details. Paystack tells our server whether a payment succeeded, and we check that with Paystack before we count a donation.
What is shown publicly
Nothing about a donation is shown on this website unless you tick “Show my donation publicly”. If you do, we show only the display name you chose (or “Anonymous”), the amount, and roughly when you gave. We never show your email, phone number, message or full name, and “Donate anonymously” always overrides a display name. Our team can hide an entry on request; [How to request removal: to be provided].
Who can see your information
Authorised members of the foundation who sign in to the admin area, and Paystack for the payment itself. This website contains no advertising or analytics tools that send your information to other companies.
Cookies and browser storage
- A security cookie that protects forms from forgery. It lasts up to 2 hours and holds a random value, not personal information.
- For staff only: a sign-in cookie for the admin area.
- Your browser’s own storage remembers which donation notices you have already seen, so the same one is not repeated. It stays on your device.
- Fonts are loaded from Google Fonts, so Google receives your browser’s network address when a page loads. We use no advertising or tracking cookies.
How long we keep it
[Retention period for donor and contact records: to be provided]
Your choices
You can donate anonymously, choose not to be shown, and ask us what we hold about you or to correct it. [Data-protection details and legal basis, to be confirmed by the foundation: to be provided]
Changes
If this page changes, the new version will replace it here. [Date of last update: to be provided]