Privacy policy

Who we are

Assoutudeen Prophetic Medicine Foundation, Assoutudeen Street, Zone 5, Fiwasaye Community, Ede, Osun State, Nigeria. Registered with the Corporate Affairs Commission under CAC/IT/NO 139886, incorporated on 28 November 2019. You can reach us at [email protected] or on 0816 188 2470.

Data protection questions reach us at [email protected], marked for the Secretary, who is responsible for personal data at the foundation. Whether we meet the threshold to register with the Nigeria Data Protection Commission as a data controller of major importance is assessed each year against the volume of data we hold; we will say so here if and when we do.

What we collect

• When you contact us — your name, email, phone number if you give one, and what you write to us.
• When you subscribe to email — your email address, your name if you give one, and a record of when you consented.
• When you donate — your name, email and the amount. Card details go directly to Paystack and never reach our servers; we never see or store them.
• When you ask for assistance — the details of your situation, which may include health information about you or your family, and any documents you upload. This is sensitive personal data and we treat it as such.
• When you buy honey or a book — your delivery address and phone number.

Why we may use it, and on what basis

• Consent — email updates, and any publication of your name, photograph or story. You may withdraw it at any time.
• Contract — fulfilling an order for a book or for honey.
• Legitimate interest — replying to a message you sent us, and keeping our own records of what we did and why.
• Legal obligation — the financial records we must keep and file with the Corporate Affairs Commission.

We ask for consent with an unticked box, every time. We never pre-tick a consent checkbox, and declining does not stop you from using the site.

Publishing your story

Applying for assistance is not permission to be written about. We report our impact by category — “four children in secondary school”, “a revert sister” — and we will not publish your name, your photograph or your story unless you have given separate, explicit, written consent for that specifically. We keep a record of that consent, and you can withdraw it.

Who we share it with

Only the services that make the site work: our hosting provider (Vercel), our database provider (Neon), our media host (Cloudinary), our payment processor (Paystack) and our email provider (Resend). Each is engaged under its standard data processing terms. We do not sell personal data, and we do not share it with anyone else unless the law requires it.

How long we keep it

• Messages you send us — two years, then deleted.
• Email subscribers — until you unsubscribe, and one year after that.
• Donation and order records — six years, because charity and tax records must be kept.
• Requests for assistance — two years after the case closes, so that a repeat request has context; the supporting documents are deleted as soon as the case is decided.
• Consent records — for as long as we rely on the consent, and three years after.

How we protect it

The site is served over HTTPS. The database is encrypted at rest, access to the admin panel is restricted by role, and staff accounts only see what their role requires — editors, for example, cannot see donation or order records at all.

The database is backed up daily by our provider. If personal data were ever exposed, we would tell the Nigeria Data Protection Commission within 72 hours of becoming aware, and tell anyone materially affected directly.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we are using it, or withdraw consent you have given. Write to [email protected] and we will respond within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.

Cookies

This site sets no analytics or advertising cookies, and embeds no third-party players — which is why the lecture recordings link out to Facebook rather than playing here. If we ever add analytics, a banner with a genuine decline option will appear before anything loads.