Privacy Policy

African Girl Rise ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights with respect to it when you use our website at https://africangirlrise.org.

1. Information We Collect

a) Information you provide directly

• Email address — when you subscribe to our newsletter or submit a contact form.
• Name and message — when you use our contact or partnership enquiry forms.
• Payment information — when you make a donation. Payment details (card numbers, billing address) are handled entirely by our payment processors (currently Flutterwave for mobile money and MarzPay for card payments) and are never stored on our servers.

b) Information collected automatically

• Usage data — pages visited, browser type, device type, and approximate geographic region, collected via server logs and analytics.
• Cookies — we use only essential cookies required for the Site to function (e.g., session management). We do not use advertising or tracking cookies.

2. How We Use Your Information

We use the information we collect to:

• Send newsletters and programme updates you have subscribed to;
• Respond to enquiries and partnership requests;
• Process and acknowledge donations;
• Improve our website and understand how it is being used;
• Comply with legal and regulatory obligations.

3. Third-Party Service Providers

We share limited data with the following trusted third parties to operate our services:

• Supabase — database hosting for subscriber and contact data (hosted in data centres with industry-standard security).
• Resend — transactional email delivery for contact confirmations and newsletters.
• Flutterwave — hosted mobile money checkout and payment processing.
• MarzPay — hosted card checkout and payment processing.

Each provider is bound by its own privacy policy and applicable data protection law. We do not permit any provider to use your data for their own marketing purposes.

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Newsletter subscribers — until you unsubscribe or request deletion.
• Contact enquiries — up to 2 years after the enquiry is resolved.
• Donation records — up to 7 years to comply with financial record-keeping obligations.

5. Your Rights

You have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data (subject to legal retention requirements);
• Withdraw consent for email communications at any time by clicking the unsubscribe link in any email or contacting us directly;
• Object to or restrict certain uses of your data.

To exercise any of these rights, please contact us using the details below. We will respond within 30 days.

6. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. All data transmitted to and from the Site is encrypted via HTTPS/TLS.

7. Children's Privacy

Our Site is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

8. International Data Transfers

Our service providers may process data outside Uganda. Where this occurs, we ensure appropriate safeguards are in place consistent with applicable data protection law.

9. Changes to This Policy

We may update this Privacy Policy periodically. The "Last updated" date at the top indicates the most recent revision. Continued use of the Site after changes constitutes acceptance of the revised policy.