Data Protection Policy
Introduction
Patriotic Citizens Initiative (PCI) is committed to safeguarding the personal data of its donors, volunteers, beneficiaries, and website users. This policy explains how PCI complies with data protection laws, including the Nigerian Data Protection Regulation (NDPR) and the EU General Data Protection Regulation (GDPR), where applicable.
​
Data We Collect
PCI collects personal information, including:
-
Contact Information: Name, email address, phone number, and physical address.
-
Payment Information: For donations, PCI uses secure third-party payment processors, and we do not store payment details on our servers.
-
Volunteer Information: Data collected when individuals sign up to volunteer, such as availability, skills, and contact information.
Purpose of Data Collection
PCI collects and processes personal data to:
-
Facilitate donations and provide receipts.
-
Manage volunteer applications and communications.
-
Allow account creation and interaction on our website (e.g., blog pages).
Data Protection Principles
PCI adheres to the following principles in processing personal data:
-
Lawfulness, Fairness, and Transparency: PCI processes data in a lawful, fair, and transparent manner.
-
Purpose Limitation: Data is collected for specified, legitimate purposes and not further processed in ways incompatible with those purposes.
-
Data Minimization: Only the data necessary for our operations is collected.
-
Accuracy: PCI ensures that personal data is accurate and up to date.
-
Storage Limitation: Data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law.
-
Integrity and Confidentiality: PCI takes appropriate measures to ensure data is secure and protected from unauthorized access, disclosure, or alteration.
Data Subject Rights
Individuals whose data PCI holds have the following rights:
-
Right to Access: You have the right to request access to your personal data.
-
Right to Rectification: You can request that we correct any inaccuracies in your data.
-
Right to Erasure: You have the right to request that PCI delete your personal data, subject to legal obligations.
-
Right to Restrict Processing: You can request that we limit the processing of your data in certain circumstances.
-
Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
-
Right to Withdraw Consent: If you provided consent for PCI to process your data, you may withdraw that consent at any time.
Data Security
PCI implements robust security measures to protect personal data, including encryption, secure hosting, and regular security audits. PCI also ensures that any third-party service providers who process personal data on our behalf are GDPR and NDPR compliant.
​
Contact Us
If you have any questions regarding this Data Protection Policy or would like to exercise your rights, please contact PCI at:
-
Email: info@pcinigeria.org
-
Phone: (234) 08058219030, 08103168394
Effective Date: 16/10/2024