Privacy Policy

Teenage Girls Rehab Foundation ("the Foundation," "we," "us," or "our") respects the privacy and dignity of everyone who interacts with us.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information through our website, programmes, services, events, fundraising activities, volunteer activities, and other interactions with the Foundation.

Because our work may involve children and young people, we take particular care when handling information relating to minors.

We aim to process personal information fairly, lawfully, transparently, and securely in accordance with applicable Nigerian data-protection requirements.

Depending on how you interact with us, we may collect:

• Name and contact details.
• Date of birth or age where necessary.
• Parent or guardian information.
• Address or general location.
• Emergency contact information.
• Information provided when applying for a programme.
• Information relating to participation in Foundation activities.
• Volunteer and staff application information.
• Donation and transaction information.
• Photographs, videos, and testimonials where appropriate consent or another lawful basis exists.
• Communications sent to us.
• Website usage information, such as device information and cookies where applicable.

We will only request information that is reasonably necessary for the relevant purpose.

The Foundation recognizes that children require additional privacy protection.

Where we process personal information relating to a child, we will apply appropriate safeguards and seek parental or guardian authorization where required by applicable law and the circumstances of the processing.

We will not knowingly use a child's personal information for unrelated purposes without an appropriate lawful basis.

We will take reasonable steps to ensure that information about children is accessible only to people who have a legitimate reason to access it.

We may use personal information to:

• Provide or administer Foundation programmes and services.
• Communicate with participants, parents, guardians, volunteers, donors, and partners.
• Respond to enquiries.
• Maintain appropriate programme and administrative records.
• Protect the safety and wellbeing of children and other individuals.
• Organize events and activities.
• Process donations.
• Recruit and manage volunteers and staff.
• Meet legal or regulatory obligations.
• Improve our programmes and website.
• Conduct legitimate fundraising and awareness activities where permitted.
• Prevent fraud, misuse, or unauthorized access.

We will process personal information only where there is an appropriate lawful basis under applicable data-protection law.

Depending on the circumstances, this may include consent, performance of a contract or agreement, compliance with a legal obligation, protection of vital interests, or another lawful basis recognized by applicable law.

The Nigeria Data Protection Commission identifies lawful bases including consent, legal obligation, and contract.

Where consent is required, we will seek consent in an appropriate and understandable manner.

For children or persons who do not have the legal capacity to provide consent, we will follow applicable requirements concerning parental or guardian authorization.

Where legally permitted, consent may be withdrawn. Withdrawal of consent will not necessarily affect processing that was already lawfully carried out before withdrawal.

We will not sell personal information.

We may share information where reasonably necessary with:

• Authorized Foundation staff.
• Authorized volunteers.
• Professional service providers.
• Healthcare or social-care professionals where appropriate.
• Government or regulatory authorities where legally required.
• Emergency services where necessary to protect someone's safety.
• Service providers who process information on behalf of the Foundation.

Where information is shared, we will take reasonable steps to ensure that it is handled appropriately.

Confidentiality is important, but it is not absolute.

Where there is a serious safeguarding concern, risk of harm, suspected abuse, or a legal obligation to disclose information, the Foundation may share relevant information with appropriate authorities or professionals.

Information will be shared only to the extent reasonably necessary for the relevant purpose.

We will take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Access to sensitive information will be restricted to authorized persons who need it for legitimate Foundation purposes.

We will retain personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

When information is no longer required, we will take reasonable steps to securely delete, destroy, or anonymize it.

Our website may use cookies or similar technologies to improve website functionality, security, and user experience.

Where applicable, users may manage cookie preferences through their browser or the website's cookie controls.

We encourage children and young people not to submit unnecessary personal information through public areas of the website.

We will not intentionally encourage children to disclose sensitive personal information publicly.

Subject to applicable law and any lawful limitations, individuals may have rights relating to their personal information, including rights to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion where legally applicable.
• Withdraw consent where consent is the lawful basis.
• Object to certain processing.
• Request restriction of certain processing.
• Raise concerns about the handling of personal information.

Requests should be directed to:

If you believe your personal information has been handled improperly, please contact the Foundation first so that we can investigate and respond.

You may also have the right to contact the Nigeria Data Protection Commission or another competent authority where applicable.

Our website may contain links to external websites.

We are not responsible for the privacy practices of websites that we do not operate. Users should review the privacy policies of those websites before submitting personal information.

We may update this Privacy Policy from time to time.

The latest version will be published on our website with an updated effective date.

Questions about this Privacy Policy can be directed to:

Last Updated: August 20, 2026