Privacy Policy
Last updated: 24 September 2026
CCRW Foundation (“CCRW Foundation”, “We”, “Us” or “Our”) respects your privacy and is committed to protecting personal data.
This Privacy Policy explains how We collect, use, disclose, store and protect personal data when You visit or use https://ccrwfoundation.org/ and any related services provided through the Website.
This Policy is intended to reflect the requirements and principles of the Nigeria Data Protection Act 2023 (NDP Act) and applicable regulations, directives and guidance issued by the Nigeria Data Protection Commission (NDPC).
1. Who We Are
CCRW Foundation
RC 113908
Registered Address:
Suite 2, Level 2, Dominion Plaza
140/141 Lekki Epe Expressway
Igbo Efon, Lekki, Nigeria
Operating Address:
56 Opebi Road
Opebi, Ikeja, Lagos, Nigeria
Email: info@ccrwfoundation.org
Telephone: +234 807 122 5921
For data-protection purposes, CCRW Foundation is responsible for determining the purposes and means of processing personal data collected through the Website, where applicable.
2. Personal Data We May Collect
Depending on how You interact with the Website, We may collect:
-
name and contact information;
-
email address;
-
telephone number;
-
postal or physical address where provided;
-
information submitted through contact, enquiry, registration, volunteer, donation or other forms;
-
correspondence and communications with Us;
-
information relating to donations or contributions;
-
technical information such as IP address, browser type, device type and operating system;
-
Website usage information, including pages visited and interactions with the Website;
-
cookie and similar technology information;
-
any other information You voluntarily provide to Us.
We do not intentionally request sensitive personal data through the Website unless there is a lawful and necessary reason to do so.
3. How We Collect Personal Data
We may collect personal data:
-
directly from You when You complete a form or contact Us;
-
when You communicate with Us by email, telephone or other channels;
-
when You make a donation or contribution;
-
automatically through cookies and similar technologies;
-
through service providers who support the operation of the Website; and
-
from other lawful sources where appropriate.
4. How We Use Personal Data
We may process personal data for purposes including:
-
responding to enquiries and communications;
-
providing information and services requested by You;
-
administering donations and contributions;
-
managing volunteers, supporters and programme participants where applicable;
-
communicating with supporters and stakeholders;
-
operating, maintaining and improving the Website;
-
preventing fraud, misuse and security incidents;
-
maintaining records;
-
complying with legal and regulatory obligations;
-
protecting Our rights and legitimate interests; and
-
carrying out other purposes disclosed to You at the time information is collected.
We will not use personal data for a materially incompatible purpose without a lawful basis for doing so.
5. Lawful Basis for Processing
Where required by applicable law, We will identify and rely on an appropriate lawful basis for processing personal data.
Depending on the circumstances, this may include:
-
Your consent;
-
performance of a contract or steps taken at Your request;
-
compliance with a legal obligation;
-
protection of vital interests;
-
performance of a task carried out in the public interest or in accordance with applicable law; or
-
legitimate interests, where applicable and where those interests are not overridden by the rights and freedoms of the data subject.
Where processing is based on consent, You may withdraw Your consent, subject to applicable legal limitations and the consequences of doing so.
6. Consent
Where We rely on consent, consent will be requested in a manner that is clear and understandable.
You may withdraw consent at any time by contacting Us, unless continued processing is permitted or required by law on another lawful basis.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
7. Disclosure of Personal Data
We may disclose personal data where reasonably necessary to:
-
service providers and technology providers supporting Our Website and operations;
-
payment and donation processors;
-
hosting, communications and security providers;
-
professional advisers;
-
regulators, government agencies or law-enforcement authorities where legally required;
-
persons or organisations where disclosure is authorised by You; or
-
other parties where disclosure is permitted or required by applicable law.
Where We engage a third-party processor to process personal data on Our behalf, We will take appropriate steps to ensure that the processing is subject to appropriate contractual, security and confidentiality safeguards.
8. International Transfers
Some service providers may process personal data outside Nigeria.
Where personal data is transferred across borders, We will take reasonable steps to ensure that the transfer and subsequent processing comply with applicable Nigerian data-protection requirements and provide an appropriate level of protection.
9. Data Security
We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, destruction or other unlawful processing.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
You should avoid sending confidential information through unsecured channels.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to meet applicable legal or regulatory requirements, resolve disputes, enforce agreements and protect Our legitimate interests.
Retention periods may vary depending on the type of information and the purpose for which it is processed.
When personal data is no longer required, We will take reasonable steps to securely delete, anonymise or otherwise dispose of it in accordance with applicable requirements.
11. Your Data Protection Rights
Subject to applicable law and any lawful limitations, You may have rights concerning Your personal data, including the right to:
-
request access to personal data We hold about You;
-
request correction of inaccurate or incomplete personal data;
-
request deletion or erasure of personal data in appropriate circumstances;
-
request restriction of processing in appropriate circumstances;
-
object to certain processing;
-
request portability of personal data where applicable;
-
withdraw consent where processing is based on consent; and
-
exercise applicable rights concerning automated decision-making and profiling.
The availability and scope of these rights depend on the circumstances and applicable law.
12. How to Exercise Your Rights
To exercise a data-protection right or make a privacy enquiry, contact:
Email: info@ccrwfoundation.org
Telephone: +234 807 122 5921
Please provide sufficient information to enable Us to identify You and understand the nature of Your request.
We may need to verify Your identity before responding to a request in order to protect personal data from unauthorised disclosure.
We will handle valid requests in accordance with applicable legal requirements.
13. Complaints
If You believe that We have processed Your personal data unlawfully or have not adequately addressed a privacy concern, You should first contact Us so that We have an opportunity to investigate and respond.
You may also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or another competent authority, as applicable.
14. Cookies and Similar Technologies
The Website may use cookies and similar technologies to:
-
enable essential Website functions;
-
remember preferences;
-
understand Website usage;
-
improve Website performance;
-
support security; and
-
where applicable, provide analytics or other functionality.
Where consent is required for a particular category of cookie or similar technology, We will seek consent in accordance with applicable requirements.
You may configure your browser to refuse or delete cookies. Some Website functions may not operate correctly if essential cookies are disabled.
15. Third-Party Websites
The Website may contain links to websites operated by third parties.
We are not responsible for the privacy practices, content or security of those websites.
You should review the privacy policy of each third-party website before submitting personal data to it.
16. Children and Minors
The Website is not intended to knowingly collect personal data from children in circumstances where applicable law requires parental or guardian involvement without obtaining the necessary consent or authority.
Where We become aware that personal data has been collected in circumstances contrary to applicable requirements, We will take reasonable steps to address the situation.
17. Third-Party Services
The Website may use third-party services for functions such as:
-
website hosting;
-
analytics;
-
communications;
-
payment processing;
-
security;
-
social media integration; and
-
other technical services.
Those providers may process personal data in accordance with their own terms and privacy policies and applicable contractual obligations.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in Our activities, technology, legal requirements or data-protection practices.
The date at the beginning of this Policy indicates when it was last updated.
Where appropriate, We will take reasonable steps to notify users of material changes.
19. Contact Us
For questions, requests or concerns relating to this Privacy Policy or the processing of personal data, please contact:
CCRW Foundation
RC 113908
Registered Address:
Suite 2, Level 2, Dominion Plaza
140/141 Lekki Epe Expressway
Igbo Efon, Lekki, Nigeria
Operating Address:
56 Opebi Road
Opebi, Ikeja, Lagos, Nigeria
Email: info@ccrwfoundation.org
Telephone: +234 807 122 5921
Website: https://ccrwfoundation.org/