Privacy Policy

HEvolve Foundation ("HEvolve", "we", "us") is committed to protecting your privacy. This policy explains what information we collect when you use our website and services, how we use it, and the choices you have. It is written to align with the Nigeria Data Protection Act (NDPA) 2023.

1. Information we collect

We only collect information you choose to give us through the forms on this site:

• Contact & enquiries: your name, email, and message.
• Newsletter: your email address and topic interests.
• Volunteer & Ambassador applications: name, email, phone, location, and the professional/background details you provide.
• HEvolve Companion requests: a name of your choosing (anonymous is fine), a contact channel and value, urgency, and any message you share. This is sensitive health-related information and is treated with the strictest confidentiality.
• Story submissions ("Real Faces"): the display name, story, and consent preferences you provide.
• Donations: your name (or "Anonymous"), email, and donation amount. We never see or store your card details — payments are processed entirely by Paystack.

2. How we use your information

• To respond to your enquiries and follow up on applications.
• To connect you with a trained Companion when you request support.
• To send you newsletters you have opted in to (double opt-in; you confirm by email).
• To process and acknowledge your donation and issue a receipt.
• To moderate and, with your explicit consent, publish stories.

3. Legal basis

We process your data on the basis of your consent (which you give by submitting a form), and our legitimate interest in operating our programs. You may withdraw consent at any time (see Section 7).

4. How we store and protect it

Your data is stored securely with our infrastructure providers (Supabase for our database, Vercel for hosting). Access to personal data is restricted to authorised HEvolve staff and is protected by row-level security and authentication. Companion (mental-health) records are restricted to administrators only.

5. Sharing

We do not sell or rent your personal data. We share it only with the service providers needed to operate (e.g. Paystack for payments, our email provider for confirmations), each bound to protect it. We may disclose information if required by law.

6. Retention

We keep your information only as long as needed for the purpose you provided it, or as required by law, after which it is deleted.

7. Your rights

Under the NDPA you have the right to access, correct, or delete your personal data, and to withdraw consent or unsubscribe at any time. To exercise any of these, email info@hevolve.org and we will respond promptly.

8. Children

Some programs (e.g. HEvolve Boys Project) serve young people. Where we collect information about a minor, we do so with the involvement of a parent, guardian, or school, and we minimise what we collect.

9. Changes

We may update this policy from time to time. The "last updated" date above reflects the latest version.

10. Contact

Questions about your privacy? Email info@hevolve.org or call +234 814 052 0164.