01 Who we are 🔗

Action Bridge Impact (“we”, “us”) operates the fundraising platform at abimpact.com.ng. For the purposes of data-protection law, including the Nigeria Data Protection Act 2023 (NDPA), we are the data controller of the information described in this policy.

02 Information we collect 🔗

We collect information in three ways:

• You provide it — donor name, email, donation amount and frequency, chosen cause, optional messages, and account details if you register (name, email, password hash, organisation profile).
• Payments generate it — transaction references, status and timestamps from our payment partners. We never receive your full card number or crypto keys.
• Technology collects it — IP address, browser and device type, pages viewed, referral source and approximate location, via cookies and similar technologies.

03 How we use your information 🔗

• Process donations and send receipts.
• Operate, maintain and improve the platform and donor experience.
• Prevent fraud, abuse and financial crime, and keep transactions secure.
• Provide organisations with donation records and reporting.
• Respond to support requests and communicate service updates.
• Meet legal, accounting and regulatory obligations.
• Send marketing only with your consent, which you can withdraw any time.

04 Legal bases for processing 🔗

We process personal data on these bases:

• Contract — to complete the donation or provide your account.
• Legitimate interests — platform security, fraud prevention, service improvement and aggregate analytics.
• Consent — for optional marketing and non-essential cookies.
• Legal obligation — record-keeping and responses to lawful requests.

05 Payment information 🔗

Payments are processed by trusted providers such as Paystack, Flutterwave, PayPal, Stripe and NOWPayments. They handle your payment details under their own privacy policies. We store only the outcome we need — reference, amount, currency, status — for receipts, reconciliation and dispute handling.

06 Cookies & similar technologies 🔗

• Essential — keep you signed in, remember choices such as theme, and secure forms. These cannot be switched off.
• Preferences — remember settings like language or donation frequency.
• Analytics — help us understand how the platform is used, in aggregate, so we can improve it.

You can control cookies through your browser. Blocking essential cookies may prevent parts of the platform from working.

07 How we share information 🔗

We do not sell your personal data. We share it only with:

• Payment processors — to complete your transaction.
• The organisation you donated to — they receive donor details needed for records and thank-yous, unless you donated anonymously.
• Service providers — hosting, email delivery and analytics partners working under contract.
• Authorities — where required by law, court order or to protect rights and safety.

08 International transfers 🔗

Some providers process data outside Nigeria. Where that happens, we take reasonable steps to ensure an appropriate level of protection consistent with the NDPA and applicable law.

09 How long we keep data 🔗

• Donation records — kept as long as needed for receipts, accounting and legal compliance (typically up to 6 years).
• Accounts — kept while active, then deleted or anonymised after closure, subject to legal retention.
• Marketing data — kept until you unsubscribe.
• Logs & security data — kept briefly for fraud prevention and diagnostics.

10 How we protect your data 🔗

We use industry-standard measures — encrypted connections (HTTPS), hashed passwords, signed webhooks, access controls and monitoring — to protect your information. No method of transmission is 100% secure, but we work to keep our safeguards strong and current.

11 Your data rights 🔗

Under the NDPA and similar laws, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time (without affecting earlier lawful processing).

To exercise any right, email privacy@abimpact.com.ng. We respond within the timeframes required by law.

12 Children’s privacy 🔗

The platform is not directed at children under 13 (or the relevant age in your jurisdiction), and we do not knowingly collect their personal data. If you believe a child has provided data to us, contact us and we will remove it.

13 Third-party links 🔗

Campaign pages and emails may link to external websites. Their privacy practices are their own — please review them.

14 Changes to this policy 🔗

We may update this Privacy Policy occasionally. The “Effective” date at the top will change when we do, and material changes may also be announced on the platform or by email.