Privacy Policy

The Services are operated by Nketsia 1 Foundation (“the Foundation”, “we”, “us” or “our”). We are responsible for deciding how and why personal information is handled for the purposes described here.

Our contact details are provided at the end of this policy and on our Contact page. Please contact us if you have a question, concern or privacy request.

Depending on how you interact with us, we may collect the following categories of information:

• Account and profile information: name, email address, phone number, country or phone region, profile photo if you choose to provide one, account preferences, and the Foundation membership or access role assigned to your account.
• Donation and pledge information: donor name and contact details, pledge amount, intended programme or project, date, status and communications about the pledge. The platform currently records pledges and does not itself process card payments. Do not send us card numbers, security codes, passwords or other payment credentials in a message.
• Volunteer applications: contact details, interests, skills, experience, availability, motivation, programme preferences and any supporting documents or images you submit.
• Event registrations: name, contact details, organisation where relevant, registration information, guest count and any notes you choose to provide.
• Messages and enquiries: the information and contact details you include when contacting us or using platform messaging features.
• Newsletter subscriptions: email address, name if provided, subscription status, and the information needed to manage your preferences.
• Programme and member activity: information you submit or generate when using member features, registering for activities, viewing your records, or communicating with the Foundation.
• Technical and security information: limited information that may be processed by the hosting, authentication and security services that make the Services work, such as session identifiers, device or browser information, diagnostic events and security logs. The exact information depends on the service and configuration.
• Publicly shared stories or images: content approved for publication with appropriate permission and safeguarding review. Sensitive details about beneficiaries, especially children, should not be published without a lawful and appropriate basis.

You can browse many public pages without creating an account. If you choose not to provide information required for a particular request, we may be unable to process that request or provide the related feature.

We use personal information only for legitimate and relevant Foundation activities, including to:

• create and maintain accounts, verify sign-in, manage profiles and apply assigned access permissions;
• record and follow up on donation pledges, provide acknowledgements, and maintain appropriate financial records;
• receive and assess volunteer applications and coordinate approved placements or assignments;
• manage event registrations and communicate event-related information;
• respond to enquiries, messages, requests and complaints;
• send newsletters or other updates when you have subscribed or where otherwise permitted by law;
• operate, maintain, troubleshoot and protect the Services, including detecting misuse and unauthorised access;
• meet applicable legal, accounting, safeguarding, reporting and governance obligations; and
• evaluate and improve our programmes and services using appropriate safeguards.

We do not use personal information for purposes that are incompatible with those described here without providing further notice or obtaining consent where required.

Depending on the information and circumstances, we handle personal information because it is needed to respond to your request or provide a service, because we have a legitimate operational or safeguarding interest that does not override your rights, because we must comply with a legal obligation, or because you have given consent. You may withdraw consent where processing relies on it; withdrawal does not make earlier lawful processing unlawful.

We aim to handle personal information in line with applicable data-protection requirements, including Ghana’s Data Protection Act, 2012 (Act 843), where applicable. The rights available to you may depend on the law that applies to your circumstances.

We do not sell personal information, rent contact lists, or share personal information with third parties for their independent direct-marketing purposes. We may share limited information in these circumstances:

• Service providers: trusted providers that host the platform, support authentication, store information, or help deliver communications and technical services. They may process information only as needed to provide or secure their services and under applicable arrangements.
• Authorised Foundation personnel: people whose assigned responsibilities require access, subject to role-based access controls and internal procedures.
• Legal and safety requirements: where disclosure is required by law, a lawful request, or is reasonably necessary to protect people, rights, property or the security of the Services.
• With your direction or permission: where you ask us to share information or otherwise give valid permission.

We do not publish private donor records, account details, volunteer applications or private messages as public content. Public stories, photographs or reports are handled separately and should be published only with appropriate authorisation and safeguards.

The Services rely on third-party service providers for hosting, account authentication and other operational functions. Depending on the providers used and their processing locations, information may be stored or processed outside your country. Where applicable law requires safeguards for an international transfer, we will take steps appropriate to that requirement.

Third-party services have their own privacy terms. We encourage you to review the relevant provider notices where you are redirected to or interact directly with a third-party service.

Google sign-in. If you choose to sign in using Google, Google and the sign-in service process information needed to authenticate you and return you to the Services. Depending on the sign-in configuration and the permissions displayed to you, this may include basic account information such as your name, email address, profile image and a Google account identifier. We use the information made available through sign-in to verify your identity, create or associate your account, support access to the Services and help protect accounts against misuse. The exact information returned depends on the sign-in flow and the permissions granted. We do not use Google sign-in as permission to read your Gmail, Drive files, Calendar or other Google service content.

Future Google API features. At the effective date of this policy, Google sign-in is the intended Google-related function. If we later introduce a feature that accesses Google user data through a Google API, we will review and update this policy before enabling that access. The updated notice will identify the categories of Google data requested, the feature and purpose for each category, how the data is accessed, used, stored and shared, and the applicable retention and deletion practices. We will request only the scopes needed for the feature and will present Google's authorisation request so that you can review and choose whether to grant permission. We will not access API data simply because you have signed in with Google.

Any Google user data obtained through a future API feature will be used only to provide or improve the user-facing feature you have authorised, to maintain its security and reliability, to provide support you request, or for other uses expressly permitted by applicable Google policies and law. We will not sell Google user data, use it for targeted advertising, or transfer it to advertising platforms. We will not use it to develop or train general-purpose artificial intelligence or machine-learning models. We will not share it except with service providers acting on our behalf and subject to appropriate restrictions, when you direct us to share it, when necessary to protect users or prevent abuse, or when required by law. We will limit human access to Google API data to cases where you request support involving that data, where necessary to investigate security incidents or abuse, or where legally required.

We retain sign-in information and any future Google API data only for as long as reasonably necessary for the purposes described in this policy, account administration, security, dispute resolution and applicable legal obligations. When data is no longer needed, we will delete it or de-identify it where appropriate, subject to lawful retention requirements. You can stop using Google sign-in and, if a future API feature is introduced, revoke its access through your Google Account permissions and disconnect the feature where that option is available. Revocation prevents future authorised access but may not itself delete information already retained. You may contact us to request access, correction or deletion, subject to applicable law.

We retain information only for as long as reasonably necessary for the purposes described in this policy, including operational, safeguarding, dispute-resolution and legal requirements. Retention periods vary by record type:

• account and profile information is kept while your account is active and for a reasonable period needed to handle security, disputes or legal obligations;
• donation and pledge records may be retained for applicable financial, accounting, audit and reporting periods;
• volunteer applications and event records are retained for the time needed to assess applications, administer participation, protect participants and meet relevant obligations;
• newsletter information is retained until you unsubscribe or ask us to remove it, subject to limited records needed to respect that preference;
• messages and enquiries are retained for the time needed to respond, resolve follow-up matters and meet applicable obligations; and
• security and diagnostic records are retained for a period appropriate to their security and operational purpose.

When information is no longer needed, we will take reasonable steps to delete it or remove identifying details, unless we are required or permitted by law to retain it.

We use reasonable administrative, technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures include access restrictions based on assigned roles and use of platform security features. No website, online service or method of transmission can be guaranteed completely secure, so please protect your sign-in credentials and contact us if you suspect unauthorised use of your account.

Please do not send passwords, one-time sign-in codes, card security codes or unnecessary sensitive personal information through public forms or messages.

The Services and their infrastructure may use essential cookies, browser storage or session technologies to support sign-in, maintain security, remember necessary settings and keep the application functioning. Disabling these technologies may affect some features. This policy does not promise that every third-party provider uses only essential technologies; provider-specific practices depend on the services enabled.

We do not sell personal information or use it to build advertising profiles. If optional analytics, advertising or other tracking technologies are introduced in the future, this policy should be updated and any required consent controls provided before they are used.

Subject to applicable law, you may be able to:

• request confirmation of whether we hold personal information about you and ask for a copy;
• ask us to correct inaccurate or incomplete information;
• request deletion of information or closure of your account;
• object to or ask us to restrict certain processing;
• withdraw consent where processing is based on consent; and
• unsubscribe from newsletter communications at any time.

To make a request, email us using the contact details below or use our Contact page. Please tell us how we can reach you and describe your request. We may need to verify your identity before acting. We will respond within the timeframe required by applicable law. Some information may need to be retained where the law requires it or where it is necessary to resolve a legitimate legal or security matter.

If you want to delete your Nketsia 1 account, contact us from the email address associated with the account and clearly request account deletion. We will review the request, explain any applicable limits, and delete or de-identify information that we are not required or otherwise permitted to retain. Deleting an account may prevent you from accessing member features.

The Foundation may deliver programmes that benefit children, but the online account and application features are intended to be used by people who are legally able to provide the information requested or by an authorised parent or guardian where appropriate. We do not knowingly seek personal information directly from children through the website without an appropriate basis and safeguards.

Any public use of a child’s image, name or story must be handled under the Foundation’s safeguarding procedures and with the required parent or guardian permission where applicable. If you believe a child’s personal information has been submitted or published inappropriately, please contact us promptly through our Photo and Image Use page or the Contact page. Programme participation alone is not publicity consent. Consent should be informed and specific to the intended use, and the child’s dignity, wishes and best interests should be considered. Images or captions that reveal a child’s school, precise location, health, case history or other sensitive details require additional safeguarding review before publication.

Our pages may link to third-party websites or services. We do not control those services and are not responsible for their privacy practices. When you leave our Services, review the privacy notice of the website or provider you visit.

We may update this policy when our services, practices or legal obligations change. The latest version will be published on this page with its effective date. If a change materially affects how we use information already collected, we will provide additional notice or seek consent where required by law.

For privacy questions, access or correction requests, account deletion requests, or concerns about how information has been handled, contact:

If you are not satisfied with our response, you may have the right to raise a concern with the relevant data-protection authority in your jurisdiction.