Privacy Policy

Introduction

This Privacy Policy outlines how Givershive collects, uses, and protects the personal data of users of the Givershive mobile application and related services.

We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and other applicable Nigerian laws and regulations concerning data privacy. By using the Application, you consent to the collection and use of your personal data as described in this Policy.

Data Controller

Givershive acts as the Data Controller for all personal data collected through the application.

Data Protection Officer (DPO)

For any questions or concerns regarding this Policy or our data processing practices, you may contact our Data Protection Officer at
info@givershive.com

Personal Data We Collect

1. Identity and Contact Data:

• Full Name
• Email Address
• Phone Number
• Residential Address (where required for specific services or payment verification)

2. Financial and Transaction Data:

• Payment instrument details (e.g., card type, expiry date, last four digits of the card number).
• Transaction history, including donation amounts, dates, and recipients.

3. Technical Data:

• Internet Protocol (IP) address
• Device type, operating system, and unique device identifiers
• Application usage data, including access times and features used

4. Profile Data:

• User profile information, preferences, and settings.

Location Data:

• General location information derived from your IP address or device settings, where you grant permission.

How We Collect Your Data

Use of Your Personal Data (Purpose and Legal Basis)

Sharing and Disclosure of Personal Data

1. Payment Gateway Provider (Paystack):

• We use Paystack to facilitate secure payment processing.
• When you make a donation, your financial and transaction data necessary to complete the payment is shared with Paystack. This is done securely, and Paystack's own privacy policy will govern the use of this data.

2. Service Providers:

• Third-party vendors who provide services such as hosting, data analysis, and technical support. These providers are required to adhere to the NDPR and other applicable laws and are only permitted to use your data for the purposes we specify.

3. Legal and Regulatory Authorities:

• We will disclose your data where we are legally required to do so, for example, to comply with a court order, regulatory requirement, or a mandatory legal process, in accordance with the NDPR.

Data Security

We implement robust technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction, in line with NDPR requirements.

• Data is stored on secure servers with restricted access.
• We use encryption (e.g., SSL/TLS) to protect data transmitted over the internet.
• Access to personal data is limited to authorized personnel.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we retain user account data for the duration of your account's existence and for a period thereafter as required by law or our legitimate business interests.

Your Data Subject Rights (in line with NDPR)

• 1. The Right to Be Informed: You have the right to know what data is being collected and how it is processed (as detailed in this Policy).
• 2. The Right of Access: You have the right to request access to the personal data we hold about you.
• 3. The Right to Rectification: You have the right to request that inaccurate or incomplete data be corrected.
• 4. The Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data under certain conditions.
• 5. The Right to Restrict Processing: You have the right to limit the way we use your data.
• 6. The Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis for processing.
• 7. The Right to Data Portability: You have the right to request a copy of your data in a structured, commonly used, and machine-readable format.

Transfer of Data Outside Nigeria

If Givershive transfers your personal data to a country outside of Nigeria, we will ensure that an adequate level of protection is afforded to the data, as mandated by the NDPR. This may include using standard contractual clauses or relying on the recipient country's adequacy status as determined by the appropriate Nigerian authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Policy on the Application or by sending an email notification at least 30 days before the changes take effect.

Contact Information