Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last Updated: 2 September 2026
Quick Navigation
Important Notice
By using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
Information We Collect
Personal Information
When you register for an account, sign up for our programs, donate, or contact us, we may collect personal information including your name, email address, phone number, mailing address, and payment information.
Community and Volunteer Applications
When you apply to join one of our communities (such as REDEF UK) or a volunteer team, we collect the details you give on the application form. For volunteers this can include your date of birth, residential address, emergency contact, occupation, and skills. We use these only to run the community and coordinate volunteering, and we never publish them.
Usage Information
We automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, and information about how you interact with our site.
Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience, analyze site usage, and assist in our marketing efforts. You can control cookie preferences through your browser settings.
How We Use Your Information
Service Delivery
We use your information to provide and improve our services, process donations, register you for events, and administer our mentorship programs.
Communication
We may use your contact information to send you updates about our programs, newsletters, fundraising campaigns, and respond to your inquiries. You can opt out of marketing communications at any time.
Analytics and Improvement
We analyze usage data to understand how visitors use our website and improve our services, content, and user experience.
Our Lawful Bases (UK and EU Visitors)
How the UK GDPR Applies to You
If you are in the United Kingdom or the European Union, we process your personal data under the UK GDPR and the Data Protection Act 2018 (or the EU GDPR, as applicable). Redefinition Leadership and Education Foundation is the data controller for the personal data described in this policy.
Consent
We rely on your consent when you apply to join a community or volunteer team, subscribe to our newsletter, or accept non-essential cookies. You can withdraw consent at any time, for example by unsubscribing or by asking us to delete your application, and withdrawing is as easy as giving it.
Contract and Legitimate Interests
We process event registration details because they are needed to provide the event you signed up for. We rely on our legitimate interests for things like keeping our services secure, preventing duplicate or fraudulent registrations, and understanding how our website is used in aggregate.
Legal Obligation
We may process and retain some information where the law requires it, for example financial records connected to donations.
Information Sharing
Third-Party Service Providers
We may share your information with trusted third-party service providers who assist us in operating our website, processing payments, sending communications, and analyzing data. These providers are bound by confidentiality agreements.
Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
With Your Consent
We may share your information with other organizations or individuals when we have your explicit consent to do so.
Data Security
Protection Measures
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls.
Payment Security
All payment transactions are encrypted using SSL technology. We do not store complete credit card information on our servers. Payment processing is handled by trusted, PCI-compliant third-party providers.
Data Breach Response
In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law and take immediate steps to mitigate any potential harm.
Your Rights
Access and Correction
You have the right to access the personal information we hold about you and to request corrections if the information is inaccurate or incomplete.
Data Deletion
You may request that we delete your personal information, subject to certain exceptions such as legal obligations or legitimate business purposes.
Opt-Out
You can opt out of receiving marketing communications from us by clicking the "unsubscribe" link in our emails or by contacting us directly. Note that you may still receive transactional emails related to your account or donations.
Data Portability
Upon request, we can provide you with a copy of your personal data in a commonly used, machine-readable format.
Your UK GDPR Rights
If you are in the UK, you also have the rights to restrict our processing, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting processing that happened before you withdrew. To exercise any right, email info@redefinition.org and we will respond within one month.
Complaints
If you are unhappy with how we have handled your data, please contact us first so we can put it right. UK residents also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
How Long We Keep Your Data
Retention Periods
We keep personal data only as long as we need it for the purpose it was collected. Event registrations are kept to run the event and its follow-up. Community and volunteer applications are kept while your application is active and while you are part of the community. Donation records are kept as long as financial regulations require.
Deletion
When data is no longer needed, or when you ask us to delete it and no legal obligation requires us to keep it, we delete it from our systems.
Children's Privacy
Age Restrictions
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Parental Consent
For programs that involve minors, we require parental or guardian consent before collecting any personal information. Parents and guardians have the right to review, modify, or delete their child's information.
International Data Transfers
Cross-Border Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information during such transfers.
Where Your Data Is Processed
We use trusted providers to run our services: Google Firebase (authentication and database), Amazon Web Services in London, England (file storage), Resend (transactional email), Paystack (donation payments), and Google Analytics (consent-based site analytics). Some of these providers process data in the United States and other countries under recognised safeguards such as the UK International Data Transfer Agreement, the UK Extension to the EU-US Data Privacy Framework, or standard contractual clauses.
Changes to This Policy
Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.
Review
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Contact Us About Privacy
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below.
Data Controller
Redefinition Leadership and
Education Foundation
Lagos, Nigeria