Privacy policy

Who we are

The data controller for this website is [Configure: legal entity details — registered name, registration number, registered address and country of incorporation]. You can reach us about anything in this policy via the contact form or at giving@buildlearnafrica.org.

What we collect

• Donation data.

  Your name, email address, the amount, currency, designation and payment channel of each gift, and the receipt we issue for it. Guest donors provide only name and email.

• Account data.

  If you create an account: your email, display name, giving history, followed projects and communication preferences.

• Messages and subscriptions.

  Contact-form messages and newsletter signups, with the time you consented.

• Technical data.

  Standard server logs (IP address, browser type, pages requested) used for security and to keep the service running.

Payment data

Payments are processed by Paystack. Your card number, M-PESA PIN or bank credentials are entered directly with the payment processor and never touch our servers. We store only the payment reference, channel, status and, where the processor provides it, a masked identifier (such as the last four digits of a card) so we can support you with queries and refunds.

How we use your data

• Processing donations and issuing receipts.
• Sending project updates for projects you have supported or chosen to follow.
• Sending the newsletter, only if you subscribed — every email has an unsubscribe link.
• Sending giving reminders you have set up, which you can stop at any time.
• Responding to your messages and support requests.
• Preventing fraud and abuse, and meeting legal and accounting obligations.

We do not sell personal data, and we do not share it with third parties for their own marketing.

Who we share data with

We use a small number of service providers to run the platform: our payment processor (Paystack), our database and hosting providers, and our email delivery provider. Each processes data only on our instructions. [Configure: complete list of processors and their locations — confirm at legal review]. We may also disclose data where the law requires it.

International transfers

Donors give from many countries and projects are located across Africa, so data may be processed outside your own country. Where required, we rely on appropriate safeguards for such transfers. [Configure: transfer mechanism — confirm at legal review].

How long we keep data

Donation and receipt records are kept for as long as accounting and charity-regulation rules require. Contact messages are kept while we handle them and for a reasonable period afterwards. Newsletter data is kept until you unsubscribe. [Configure: retention periods — confirm at legal review].

Children’s data

Photographs or stories involving children appear on this site only with documented guardian consent recorded in our consent registry, and consent can be withdrawn at any time. We never publish a child’s full name together with identifying details. Read our safeguarding commitments.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, use the contact form. We may need to keep donation records that the law requires us to retain even after a deletion request, and we will tell you if that is the case.

Cookies

We use cookies that are necessary for the site to work — for example keeping you signed in and protecting forms against abuse. We do not use advertising cookies. [Configure: cookie inventory — confirm at legal review if analytics are added].

Changes to this policy

If we change this policy in a meaningful way we will update this page and, where the change affects how we use data you have already given us, tell you by email.