Privacy Policy

A legal disclaimer

Ignite Dreams Youth Development Foundation

Disclaimer:
Ignite Dreams Youth Development Foundation (“the Foundation,” “we,” “our,” or “us”) is committed to protecting the privacy and personal information of all individuals who engage with our organization, whether through our website, programs, events, or donation platforms. This Privacy Policy is designed to explain how we collect, use, store, and safeguard personal information in compliance with international data protection standards, including the General Data Protection Regulation (GDPR), the Nigeria Data Protection Regulation (NDPR), and other applicable privacy laws. By accessing our website, participating in our programs, or providing personal information to the Foundation, you acknowledge and consent to the practices described in this policy.

Information We Collect

We may collect personal and non-personal information for purposes necessary to deliver our programs, maintain communications, and manage donations. This includes:

Personal Information:

Name, date of birth, gender, and contact details (email, phone number, postal address)
Identification documents when required for program verification
Payment information (processed securely through third-party providers; full card or bank details are not stored)
Emergency contact details for program participation

Non-Personal Information:

IP addresses, device types, browser types, and website usage statistics
Cookies and analytics data to improve user experience

Sensitive Data:

Information about minors (under 18) collected only with parental or guardian consent
Data related to special needs or medical conditions, collected strictly to ensure participant safety

How We Use Your Information

Your information is used solely for legitimate purposes in line with the Foundation’s mission:

To manage program registration, participation, and communication
To process donations and issue receipts or certificates of contribution
To improve website functionality, user experience, and program delivery
To send newsletters, updates, and relevant communications regarding initiatives
To comply with legal obligations, donor reporting, and auditing requirements
To protect the safety, security, and rights of participants and the organization

We do not sell, trade, or rent your personal information to third parties.

Legal Basis for Processing Data

We process personal data based on the following legal grounds:

Consent: Individuals voluntarily provide information for program participation or donations
Contractual necessity: To fulfill obligations related to services, donations, or agreements
Legal compliance: To meet reporting or regulatory requirements
Legitimate interests: To manage the Foundation’s operations, improve programs, and communicate with supporters

Sharing and Disclosure of Information

We may share personal information in the following circumstances:

With Service Providers: Secure third-party platforms for payment processing, email communication, and IT hosting
For Legal Compliance: When required by law, regulation, or legal process
With Authorized Partners: NGOs, governmental bodies, or international organizations for program collaboration, monitoring, or reporting
In Emergencies: To protect the life, safety, or health of participants or the public

All third parties are bound by confidentiality and data protection obligations.

Data Retention

The Foundation retains personal information only as long as necessary for the purposes outlined in this Privacy Policy or as required by law. Retention periods may include:

Donor information: Up to 7 years for auditing and reporting purposes
Program participant data: For the duration of participation plus 3 years for follow-up, evaluation, and alumni engagement
Website analytics: Aggregated and anonymized for ongoing improvement

Upon expiration of retention periods, data is securely deleted or anonymized.

Security of Data

We implement robust technical and organizational measures to protect personal information from unauthorized access, alteration, disclosure, or destruction, including:

Secure servers, encryption, and access controls
Regular security audits and staff training
Strict protocols for physical and digital data storage

Despite these measures, no digital system is entirely secure. By providing information, you acknowledge the residual risk of electronic data transmission.

Rights of Data Subjects

Individuals have the right to:

Access and obtain a copy of their personal data
Request correction of inaccurate or incomplete data
Request deletion of data, where legally permissible
Object to processing or withdraw consent at any time
Receive information in a portable, machine-readable format
Lodge complaints with a supervisory authority if privacy rights are violated

Requests can be submitted via: info@ignitedreamsfoundation.org

Children’s Privacy

The Foundation takes the privacy of minors seriously. Participants under 18 must provide parental or guardian consent before data collection or participation. We do not knowingly collect data from children without proper consent.

International Data Transfers

The Foundation may transfer personal information to countries outside the user’s residence for operational purposes, including partner collaboration and donor reporting. All international transfers are conducted in accordance with applicable laws, with safeguards to ensure equivalent data protection.

Cookies and Online Tracking

Our website uses cookies and similar technologies to enhance user experience, analyze traffic, and optimize functionality. Users can control cookie settings via their browser preferences. Third-party analytics providers may also collect anonymized information in accordance with their privacy policies.

Third-Party Links

The Foundation’s website may contain links to external organizations or partner websites. We are not responsible for the privacy practices of third-party sites. Users are encouraged to review the privacy policies of any external platforms before engagement.

Updates to This Privacy Policy

We may revise this Privacy Policy to reflect changes in legal requirements, organizational practices, or technological advancements. Updated policies will be posted on this page with the effective date. Continued use of our website or services constitutes acceptance of any updates.

Governing Law

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria and applicable international privacy standards.

Data Protection Addendum (DPA)

This Data Protection Addendum (“DPA”) supplements the Foundation’s Privacy Policy and is intended to ensure compliance with international data protection standards, including the GDPR, NDPR, and donor requirements. It governs the processing of personal data in the context of partnerships, donations, grants, and program collaborations with third-party organizations, partners, or funders (“Partners”).

Definitions

“Data Controller” – the entity that determines the purposes and means of processing personal data. In most cases, the Foundation acts as the Data Controller.
“Data Processor” – the entity that processes personal data on behalf of the Data Controller. Third-party service providers engaged by the Foundation may act as Data Processors.
“Personal Data” – any information relating to an identified or identifiable individual, including but not limited to names, contact details, identification numbers, demographic data, donation records, and program participation information.
“Sensitive Data” – data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health information, or information about children under 18, which require special protection.

Roles and Responsibilities

Ignite Dreams Youth Development Foundation (IDYDF):

Acts as Data Controller for all personal data collected in connection with its programs, donations, and partnerships.
Ensures that all processing of personal data complies with applicable laws and international standards.
Maintains appropriate technical and organizational measures to protect personal data.

Partners / Donors:

Must provide personal data to IDYDF only when necessary for legitimate purposes.
Ensure that any data shared complies with applicable data protection laws.
Acknowledge that IDYDF will act as Data Controller and may store, process, and use such data for purposes outlined in program agreements or grant conditions.

Data Processing Obligations

The Foundation will process personal data only for the following purposes:

Program registration, participation, monitoring, and evaluation
Donor reporting, acknowledgments, and auditing in compliance with grant requirements
Communication with participants, donors, and partners
Legal, financial, and operational compliance
Research, monitoring, and advocacy related to youth development and empowerment

Data will not be processed for purposes beyond those agreed with donors or partners, and the Foundation will not sell or commercialize personal data.

Data Sharing and Transfers

Personal data may be shared with third-party service providers for secure payment processing, program delivery, cloud storage, and communication platforms.
International transfers of personal data will occur only with adequate safeguards, including standard contractual clauses or similar protections, in accordance with applicable laws.
Data will not be transferred to countries lacking adequate data protection measures unless explicit consent is obtained or lawful mechanisms are in place.

Data Retention and Deletion

Personal data will be retained only for as long as necessary to fulfill the purpose of collection, meet legal obligations, or comply with donor reporting requirements.
Upon expiration of retention periods, data will be securely deleted, anonymized, or destroyed.
Data subjects may request deletion of their personal information where legally permissible, and the Foundation will respond within a reasonable timeframe.

Security Measures

IDYDF implements robust measures to safeguard personal data:

Encryption of sensitive data in transit and at rest
Secure storage systems and restricted access controls
Regular staff training and audits of data handling practices
Incident response procedures to manage data breaches or unauthorized access

Partners acknowledge that no system can guarantee 100% security; reasonable measures will be taken to mitigate risk.

Data Subject Rights

Individuals whose data is processed by IDYDF are entitled to:

Access, review, or request a copy of their personal data
Correct inaccurate or incomplete information
Request data deletion or restriction of processing, subject to legal or contractual requirements
Object to processing for direct marketing or profiling purposes
Lodge complaints with the relevant data protection authority

Requests can be submitted to info@ignitedreamsfoundation.org.

Data Breach Notification

In the event of a data breach affecting personal or sensitive information:

IDYDF will notify affected individuals without undue delay where legally required
Partners and donors will be informed in accordance with contractual obligations
Corrective and preventive measures will be implemented to mitigate risks and prevent recurrence

Compliance and Audit

IDYDF may be audited by donors, regulators, or independent assessors to ensure compliance with data protection obligations.
Partners are expected to cooperate with audits and provide necessary documentation, where applicable.
Non-compliance with data protection obligations may result in termination of partnerships or funding agreements.

Governing Law and Dispute Resolution

This DPA is governed by the laws of the Federal Republic of Nigeria and applicable international data protection frameworks.
Disputes arising under this DPA will be resolved through negotiation, and where necessary, arbitration under mutually agreed rules.

Acknowledgment:
By sharing personal data with Ignite Dreams Youth Development Foundation, partners, donors, and participants acknowledge and agree to the terms of this Privacy Policy and Data Protection Addendum.

Effective Date: November 8, 2025

Contact Information

For inquiries, data requests, or concerns regarding this Privacy Policy and/or Data Protection Addendum:

Email: info@ignitedreamsfoundation.org
Website: www.ignitedreamsfoundation.org
Address: Bayelsa State, Nigeria

We Need Your Support Today!

Donate