Privacy Policy

1. Who we are

ExJAM Humanitarian Foundation is a non-profit organisation registered under Nigerian law as an Incorporated Trustee. For data enquiries: info@exjamfoundation.org.

2. Information we collect

We collect the following categories of personal data:

• Account data: name, email address, phone number, state of residence when you register.
• Donation data: transaction amounts, payment processor references, donation history. We do not store full card details.
• Case submission data: beneficiary details, medical or welfare information submitted via the case portal.
• Correspondence: messages sent via the contact form, volunteer applications, and ambassador applications.
• Usage data: pages visited, referring URL, device type. Collected anonymously via analytics.

3. How we use your data

• Process and acknowledge donations.
• Manage case submissions, assessments, and sponsorship matching.
• Send you impact reports, newsletters, and event invitations (with opt-out on every email).
• Comply with Nigerian regulatory obligations (CAC, FIRS, NDPR).
• Improve our website and services using aggregated, anonymised analytics.

4. Legal basis for processing

We process your data on the basis of: (a) your consent, given at registration or donation; (b) performance of a contract, where you have sponsored a case; (c) legitimate interests, for fraud prevention and service improvement; and (d) legal obligation, for financial record-keeping.

5. Data sharing

We do not sell or rent personal data. We share data only with: (a) payment processors (Paystack, Stripe) for donation processing; (b) Resend for transactional email delivery; (c) regulatory authorities where legally required. All processors are contractually bound to NDPR-compliant data handling.

6. Data retention

Donor records are retained for 7 years for tax and regulatory compliance. Account data is retained while your account is active and for 2 years after closure. Case data is retained for the duration of programme involvement and 5 years thereafter.

7. Your rights

Under the Nigeria Data Protection Regulation (NDPR), you have the right to: access, correct, or delete your personal data; withdraw consent at any time; object to processing; and lodge a complaint with the National Information Technology Development Agency (NITDA). To exercise any right, email privacy@exjamfoundation.org. We respond within 30 days.

8. Cookies

We use essential session cookies for login functionality and anonymous analytics cookies. No advertising or third-party tracking cookies are used. You may disable cookies in your browser settings without affecting core functionality.

9. Changes to this policy

We may update this policy periodically. Material changes will be notified by email to registered users. The current version is always available at this URL.