Skip to content
HAPEI
Donate
HAPEI

Privacy Policy

Who we are

Suggested text: Our website address is: http://hapeiglobal.org.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.

What we collect and why

We only ask for what we need. Every form that collects personal details has a tick box so that you can confirm you have read this policy before you send anything.

Contact form

  • What we collect: Your name, email address and message.
  • Why: To read and reply to your message.
  • Where it goes: The message is emailed to our team and a confirmation is emailed to you. Our team may also be alerted by text message. A short excerpt of each email is kept in an internal message log (the most recent 200 messages).

Newsletter sign up

  • What we collect: Your email address.
  • Why: To send you our newsletter. You can ask us to remove you at any time.
  • Where it goes: In our subscriber list, with the date you signed up and the page you signed up from.

Partnership enquiries

  • What we collect: Your name, organisation, email address, phone number, role, website, whether you are writing as an organisation or an individual, the kind of partnership you are interested in, and your message.
  • Why: To consider and respond to your partnership enquiry.
  • Where it goes: As a record in our website dashboard, and by email to our team.

Programme enquiries and volunteer interest

  • What we collect: Your name, email address, phone number (optional), your availability and skills (volunteer interest), and your message.
  • Why: To respond to your enquiry or volunteer interest.
  • Where it goes: By email to our team, with a confirmation to you. A short excerpt is kept in the internal message log. It is not saved as a separate record.

Job and volunteer applications

  • What we collect: Your name, email address, phone number, location, availability, portfolio link, how you heard about us, your message, and your CV if you upload one.
  • Why: To assess your application and contact you about it.
  • Where it goes: As a record in our website dashboard and by email to our team. Your CV is stored in a private folder under a random file name and is only available to our administrators.

Campus Peace Ambassador applications

  • What we collect: The details asked on the application form (Full name, Email address, Phone number, Gender, Campus / Institution, Course of study, Level of study, Why do you want to become an ambassador?, How did you hear about HAPEI?, Student organisations you are involved in, Previous leadership or advocacy experience), and the files you upload (Recent photo). We also keep a scrambled (hashed) form of your internet address, which cannot be turned back into the address, to spot repeated or abusive submissions.
  • Why: To assess your application, contact you about it and, if you are accepted, run the ambassador programme.
  • Where it goes: As a private record in our website dashboard and by email to our team. Uploaded files are stored in a private folder under random file names, are not placed in the public media library, and are deleted if the application is deleted.

Ambassador badge requests

  • What we collect: Your name, email address, campus (optional), and the badge image you create, which includes any photo you add to it. We also keep a scrambled (hashed) form of your internet address to limit repeat requests.
  • Why: To check your request and email your badge to you once it is approved.
  • Where it goes: As a private record in our website dashboard. The badge image is stored in a private folder under a random file name and is emailed to you when approved.

Event registration

  • What we collect: Your name, email address, phone number (optional), organisation or school (optional), and any notes you add, such as access needs.
  • Why: To reserve your place, manage attendance and send you event information.
  • Where it goes: As a record in our website dashboard, and by email to our team and to you.

Community feedback

  • What we collect: Your rating, the area your feedback is about, your message, your community or location (optional), your name (optional, otherwise recorded as Anonymous), your email address (optional), and whether you would like a reply.
  • Why: To learn from your experience and improve our work, and to reply if you ask us to.
  • Where it goes: As a record in our website dashboard.

Donations

  • What we collect: Your name, email address, phone number (optional), the amount and currency, the payment method you choose and a payment reference. Your card or bank details are typed into the payment provider’s own page and are never seen or stored by us.
  • Why: To process your donation, confirm it, send you a receipt and keep our financial records.
  • Where it goes: As a record in our website dashboard. Records of donations are kept as long as needed for our accounts and the law.

Signing in

  • What we collect: For staff, team members and ambassadors who sign in: your username or email address and password. Passwords are stored only in scrambled (hashed) form.
  • Why: To let you into your account and keep it secure.
  • Where it goes: In our website database. Failed sign-in attempts are counted against a scrambled form of the internet address to block guessing attacks.

Security and spam protection

  • What we collect: A scrambled (hashed) form of your internet address, used to limit how often a form can be sent, plus a hidden field that only automated programs fill in.
  • Why: To keep the website and its forms safe from abuse and spam.
  • Where it goes: Briefly, as temporary counters that expire on their own.

Cloudflare Turnstile security check

  • What we collect: When you use a form that is protected by Turnstile, Cloudflare checks signals from your browser to tell whether you are a person or a program. It may use short-lived browser storage while doing this.
  • Why: To stop automated programs from abusing our forms.
  • Where it goes: Handled by Cloudflare under its own privacy policy. We receive only a pass or fail result.

Loading the website

  • What we collect: When a page loads, your browser contacts services that supply our fonts and scripts, which can see your internet address and browser details.
  • Why: To display the website correctly.
  • Where it goes: Not stored by us.

Who else handles your information

  • Our web hosting provider stores this website and its database.
  • Our email provider delivers the emails we send and receive through the site.
  • Payment providers (Flutterwave) process your payment on their own pages under their own privacy policies.
  • Cloudflare, Inc. (Turnstile security check).
  • Google Fonts (typefaces), the cdnjs content network, which is run by Cloudflare (animation scripts), and YouTube (Google) wherever a page shows a YouTube video.

We do not sell your personal information.

Cookies and similar technologies

Signing in (for staff, team members and ambassadors) uses the standard WordPress sign-in cookies, which keep you logged in and keep your account secure. They are only set when you sign in.

Visitors to this website may also receive these cookies:

  • _ga: optional.
  • _ga_Y5G5C6ZMMV: optional.

We remember your cookie choice in a cookie named hapei_cookie_choice for 180 days, so we do not ask you again each visit. You can change your choice at any time with the cookie settings link, or by clearing cookies in your browser.

How long we keep it

We keep personal information only for as long as it is needed for the purpose it was collected for, or for as long as the law requires, and then delete it. You can ask us to delete it sooner.

Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it, object to how we use it, and withdraw your consent at any time. If you are unhappy with how we handle your information you can complain to your data protection authority; in Nigeria this is the Nigeria Data Protection Commission.

Contact us

To use any of these rights, send us a message through our contact page and tell us what you would like us to do.

This section is kept up to date automatically from the forms and services this website uses. Last updated 2 November 2026.