Privacy notice

Who is responsible for your data

This website belongs to Dawis Initiative for Sustainability Community Development (DISCOD). DISCOD decides how the personal data collected through the website is used, and is responsible for it under the Nigeria Data Protection Act 2023 (NDPA). Our contact details are at the end of this page.

Browsing the website

You can read every page without an account and without giving us any personal data.

• We do not use analytics, advertising or tracking cookies, and we do not set any cookies for visitors.
• Two settings are remembered in your own browser storage and are never sent to us: whether you turned Low-data mode on or off, and whether you closed the announcement bar during this visit.
• Like every website, the servers that deliver these pages record technical details of each request (such as your IP address, browser type and the page asked for) to keep the site running and secure.
• Photos and page content are delivered from Sanity, the content service DISCOD uses to manage the website. Your browser also keeps a connection to Sanity open so that pages update when we publish a change. No cookie is set for this.
• The share buttons are plain links. Nothing is loaded from WhatsApp, LinkedIn or X unless you click one, and then their own privacy policies apply.

What each form collects

Each form sends only what you type into it:

• Contact form: your name, email address, phone number (optional), subject (optional) and message.
• Partner enquiry: your organisation's name and type, your name, email address, phone number (optional), the areas of work you are interested in, and your message.
• Volunteer form: your name, email address, phone number, where you live (state and local government area), your skills, when you are available, and an optional message.
• Feedback and complaints: the kind of report, what happened, and optionally where and when. You can stay anonymous. If you do not, you can also give your name (optional) and a phone number or email so we can reply.

We do not keep your IP address, your browser or device details, or anything else about your visit with what you send. The newsletter sign-up is not switched on yet, so it collects nothing.

We use what you send only to answer you and to deal with the matter you raised. We do not sell it or share it for marketing.

Where it is stored and who can see it

• Contact, partner and volunteer forms: what you send is saved as a record in Sanity, the content management system behind this website, and a copy is emailed to DISCOD's inbox through Resend, an email delivery service. Everyone at DISCOD with a Studio account can open these records.
• Feedback and complaints: your report is emailed only to the DISCOD inbox for feedback and safeguarding, through Resend. It is not saved on the website or in Sanity. Sanity keeps only the date, the kind of report (feedback, complaint or safeguarding concern) and whether it has been dealt with, so we can count reports. That record contains nothing you wrote and nothing that identifies you.
• If you choose to stay anonymous, your report carries no name or contact details anywhere: not in the email and not in Sanity. This also means we cannot reply to you.
• We do not send automatic confirmation emails yet. Once DISCOD's own email domain is set up, you will receive a short confirmation at the email address you gave. It will not repeat what you wrote, and it is never sent for anonymous reports or when you gave only a phone number.
• To keep out spam, each form uses Cloudflare Turnstile. It loads only when you start filling in a form, and it checks technical details of your browser to tell people from automated programs. We receive only a pass or fail. Forms also contain a hidden field and a short timer that catch automated programs. These keep no data about you.
• If we switch on a limit on how many messages can be sent in a short time, Upstash, a database service, keeps a scrambled code made from your connection's address (never the address itself) for up to ten minutes.
• Sanity, Resend, Cloudflare, our hosting provider and, if the limit is switched on, Upstash may process this data on servers outside Nigeria. They act only on DISCOD's instructions.

Donations

When you give through the Donate page, you pay on the secure checkout page of Paystack, the payment company DISCOD uses. Paystack's own privacy policy applies to what you enter there. DISCOD never sees your card or bank details.

• What the Donate page asks for: the amount, whether it is one-time or monthly, where you would like the gift to go, your email address (required, so Paystack can send your receipt), and optionally your name and phone number, whether you are covering the processing fee, and whether you would like updates from DISCOD. The website passes these to Paystack to set up the payment. It does not keep your email address, name or phone number itself.
• What Paystack holds: your payment details, your email address, any name and phone number you gave, and the record of each payment. DISCOD's finance team sees your email, name, phone number and the payment in DISCOD's Paystack account, and uses them to answer questions about your gift and, if you ticked the box, to send you updates.
• What the website keeps: a record of each gift in Sanity with the Paystack reference, the amount, any fee you covered, the currency, where the gift should go, whether it is one-time or monthly, the kind of payment (for example card), its status, its date and Paystack's customer code. No name, email address or phone number is stored there.
• Emails: for each gift, DISCOD's finance inbox receives an email through Resend with the amount, where it should go and the reference. It contains no card details and no contact details. We do not send thank-you emails yet; once DISCOD's own email domain is set up, you will receive one at the address you gave. Until then, Paystack's receipt is your receipt.
• Monthly gifts: Paystack keeps your card on file to take each monthly payment. You can update the card or cancel at any time on Paystack's page for your monthly gift. Ask for the link on the Manage your monthly gift page.
• Updates: we send you news about DISCOD's work only if you ticked the box for updates, and you can ask us to stop at any time.
• If we switch on a limit on how many times the Donate page can be used in a short time, it works as for the forms: Upstash keeps a scrambled code made from your connection's address, never the address itself, for up to ten minutes.

Bank transfers

If you give by bank transfer, you send the money from your own bank to DISCOD's bank account. Your bank and DISCOD's bank handle the payment, and DISCOD's finance team sees it on DISCOD's bank statement, with the name on the sending account and any narration you added.

• What the "I've made a transfer" form asks for: the amount, the currency, the date you sent it and where you would like the gift to go, and optionally your name, an email address (only so we can thank you) and a message.
• Where it goes: what you send is saved as a record in Sanity and emailed to DISCOD's finance inbox through Resend. Everyone at DISCOD with a Studio account can open these records. Finance marks a record confirmed once the transfer shows on DISCOD's bank statement.
• What we never do: show transfer notices, totals or donors' names on the website, or add you to a mailing list because you sent the form.
• The form uses Cloudflare Turnstile and the same spam checks as the other forms. If the limit on repeated use is switched on, it works as described above.

How long we keep it

Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

• be told what personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted, or its use restricted;
• object to how we use it, and withdraw your consent at any time;
• receive your data in a commonly used format, or have it sent to another organisation.

If you are not satisfied with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).

How to make a request

Email us, call one of our offices or visit the head office using the details below, and tell us what you would like us to do. We may ask you to confirm who you are before we act on a request, so that your data is never given to someone else.

Changes to this notice

When the website changes how it handles personal data, we will update this page and the date at the top.