Privacy & Data Protection

Last updated: December 1, 2025

Protecting the dignity, safety, and confidentiality of every girl, donor, volunteer, and partner.

At Nuvia, trust is at the heart of everything we do.

We are committed to handling personal information with compassion, responsibility, and the highest standards of data protection.

This Privacy & Data Protection page explains how we collect, use, store, and safeguard the personal data of our participants, families, team members, volunteers, donors, and partners.

Table of Contents

Who This Policy Applies To

This policy applies to everyone involved with Nuvia, including:

  • Program participants and their guardians
  • Staff, volunteers, and interns
  • Donors and supporters
  • Partners (schools, hospitals, NGOs, community organizations)
  • Visitors who submit forms on our website

What We Mean by Personal Data

Personal data means any information that can identify a person directly or indirectly, such as:

  • Name, phone number, or address
  • Email address or social media handle
  • Photos, audio, or video
  • ID numbers or birthdates
  • Program attendance or assessment responses

 

Processing refers to anything done with the data: collecting, storing, securing, using, sharing, or deleting it.

What Information We Collect

We may collect the following types of information when you interact with Nuvia:

  • Personal identification (name, age, gender, date of birth)
  • Contact information (phone number, email, address)
  • Emergency contact details
  • Program participation information
  • Health-related notes only when necessary for safety
  • Photos, videos, or stories (only with consent)
  • Donation information (amount, payment method, tax details)
  • Volunteer or job application information
  • Website interaction data (IP address, browser type, cookies)

 

Third-Party Services We Use

Some personal data may be processed through trusted, secure third-party providers such as Donorbox, Stripe, Jotform, SurveyMonkey, Google Workspace, and Mailchimp.
Each provider follows its own data protection and encryption practices.

We never authorize third parties to sell or use your information for marketing.

How We Use Personal Data

We collect personal information only when it is necessary for Nuvia’s work, including:

  • Program enrollment and participation
  • Monitoring & evaluation (attendance, surveys, progress tracking)
  • Communication with guardians
  • Volunteer and staff onboarding
  • Donor engagement and thank-you messages
  • Partnerships and coordination with local services
  • Safety, transport coordination, and emergency contact

Children's Privacy

Special care is taken when collecting data from minors.

We inform all participants (and guardians when applicable) about:

  • Why data is collected
  • How it will be used
  • Their rights
  • How to request changes or deletion

 

Consent

We ask for consent when needed, including:

  • Photos, videos, or audio recordings
  • Stories or testimonies
  • Media use for awareness or fundraising
  • Any data sharing beyond Nuvia’s internal systems

 

For minors, parental or guardian consent is required.

Consent is always:

  • Voluntary
  • Specific
  • Informed
  • Revocable at any time

Data Security

We use secure physical and digital systems to protect personal information. This includes:

  • Encrypted platforms
  • Password-protected files
  • Limited access for authorized staff and volunteers
  • Secure onsite storage for any physical documents
  • Required privacy training for all team members

 

We take confidentiality seriously.

How We Protect Children’s Data

Because we serve minors, we apply additional protections:

  • We collect only the minimum data required.
  • Sensitive information is seen only by authorized staff.
  • Guardians must provide consent for participation, transport, and media.
  • No child’s identity will ever be shared publicly or used for fundraising stories without explicit guardian permission.
  • Program reports use anonymized or aggregated data only.

When We Share Data

Your personal data will never be sold or shared for marketing purposes.

We only share data when:

  • Required to deliver our programs (e.g., referrals, emergency support)
  • Required by law or for safety reasons
  • Working with trusted partners who uphold strong privacy standards

Any sharing with partners is governed by written agreements to ensure protection and confidentiality.

Your Rights

Every person whose data we collect has the right to:

  • Access their personal information
  • Request corrections if something is inaccurate
  • Withdraw consent (for photo/media or optional data)
  • Request deletion of certain data
  • Submit a complaint if they believe their information has been mishandled

To exercise your rights, contact us at: hello@nuviaglobal.org

Data Retention

We retain personal information only as long as necessary:

  • Participant data: for the duration of participation + 3 years
  • Volunteer & staff records: legally required retention
  • Donor receipts & financial data: 7 years (IRS requirement)
  • Photos/videos: only while consent is valid
  • Emails & communications: dependent on operational needs

Data Breach Procedures

If a data breach is suspected:

  • Staff and volunteers must report it immediately to the Executive Director.
  • We will investigate promptly.
  • If necessary, we will notify affected individuals and authorities in line with legal requirements.

 

Your safety is our responsibility.

International Data Considerations

Nuvia operates in multiple countries.


We comply with relevant data protection laws in all regions, including:

  • GDPR (for any EU-based data subjects, including France)
  • Local regulations in all African countries where we operate
  • U.S. nonprofit data management standards

 

We ensure cross-border data handling is legal, ethical, and secure.

Responsibility & Governance

  • The Executive Director oversees the implementation of this policy.
  • All Nuvia staff, volunteers, and board members are required to follow these rules.
  • Privacy training is part of onboarding for all team members.

Data protection is a shared responsibility across our organization.

Policy Review

This policy is reviewed every two years and approved by the Board of Directors to ensure it stays aligned with best practices, laws, and our mission.

Privacy Questions

We are always happy to help.

Email us at: hello@nuviaglobal.org