Skip to main content

Privacy notice

Important:

Draft — awaiting legal review

This page is a draft and is awaiting review by a qualified professional. It does not yet reflect a final legal position and should not be relied upon.

This notice explains what personal information Significant Impact collects, why, and what rights you have over it.

It is written to be read, not to be survived. If anything here is unclear, please ask us.

Who is responsible

Community Significant Impact Charity Organization (CSICO) is the data controller. We are registered in Nigeria with the Corporate Affairs Commission, registration number 8353894.

Questions about your information can be sent to us at the address on our contact page.

What we collect, and why

If you ask us for support, we collect what you tell us about your situation so we can consider your request. We ask for as little as we can.

If you volunteer, we collect what we need to place you safely in a role.

If you donate, we collect what is needed to process the gift and meet our financial obligations.

If you subscribe to updates, we collect your name, your email address and a record of the consent you gave.

Special category data

A support application may reveal information about health, religious belief or other sensitive matters. We collect this only where it is necessary to consider your request, we restrict who can see it, and we do not use it for fundraising.

Lawful bases

The lawful bases we rely on for each purpose are being confirmed as part of legal review and will be set out here in full.

Who we share it with

We do not sell your information, and we do not share it for anyone else's marketing.

We share it with a partner organisation only where you have consented, or where someone is at risk of serious harm and the law requires or permits it.

Service providers also handle information on our behalf so that this website and our email work: our website host, Vercel, and the providers of our email services. Some of them are based outside Nigeria, including in the United States.

How long we keep it

Our retention periods are being confirmed as part of legal review. Our principle is to keep information for as long as it is needed and no longer.

Your rights

You can ask for a copy of your information, ask us to correct it, ask us to delete it, object to how we use it, and withdraw consent at any time. Withdrawing consent to marketing never affects support you have asked for or received.

You can also complain to the Nigeria Data Protection Commission. We would rather you came to us first, but you do not have to.

Children's information

We do not work directly with children.