Privacy Policy
1. What We Collect
We collect the absolute minimum personal data necessary to operate our urgent clinical fund and organize volunteer presence:
- Donor Email Addresses: Collected when you fund a clinical need to send you an immediate payment receipt and follow-up clinical delivery confirmation.
- Volunteer Information: Name, email address, phone number, city, and voluntary support notes submitted through our volunteer form.
- Newsletter Addresses: Email addresses provided with affirmative consent to receive periodic project updates.
No Patient Health Data: We explicitly do not collect, process, or store patient medical history, diagnostic records, or sensitive health information through this website under the Nigeria Data Protection Act (NDPA). Referrals are managed person-to-person by phone or WhatsApp via /refer.
2. Payment Data (Paystack)
All donations and contributions are processed directly by Paystack, a certified PCI-DSS Level 1 payment processor.
The Petros Project never sees, stores, or handles your credit or debit card numbers, CVVs, expiration dates, or bank verification numbers (BVN). All card details are captured securely within Paystack’s encrypted inline checkout.
3. Purpose of Processing
We process your information solely for the following legitimate purposes:
- To confirm your financial contribution and transmit verifiable receipts.
- To coordinate volunteer hospital presence and patient family assistance.
- To send official project transparency disclosures when requested.
- To satisfy non-profit audit, accountability, and statutory governance rules.
4. How Long We Keep It
We store data only as long as necessary to fulfill the purpose for which it was gathered:
- Donation records: Retained for financial reconciliation and compliance with Nigerian non-profit audit regulations.
- Volunteer submissions: Retained while volunteer coordination is active, or immediately purged upon your request.
- General inquiries: Retained until the enquiry is resolved.
5. Third-Party Sharing
We never sell, rent, monetize, or trade your personal information with commercial third parties or advertisers. We only share information with certified infrastructure providers (such as Paystack for transaction processing and Resend for transaction email delivery) strictly to execute our services.
6. Your Rights & Data Deletion
Under the Nigeria Data Protection Act (NDPA), you have the right to:
- Request access to any personal data we hold about you.
- Request rectification of inaccurate contact information.
- Request the complete deletion of your data from our contact lists.
- Withdraw consent at any time without adverse consequence.
To exercise any of these rights, please email us directly with the subject line “Data Privacy Request”.
7. Contact Address for Requests
For questions, concerns, or deletion requests regarding this policy, contact our team: