DATA PROTECTION & PRIVACY POLICY

Introduction

The International Organisation for Peace Building and Social Justice (“PSJUK”, “we”, “us”, “our”) is committed to protecting the privacy and personal data of all persons who interact with us. This includes volunteers/voluntary staff, donors, supporters, partners, beneficiaries and website users. 

This Data Protection and Privacy Policy (“Policy”) explains how we collect, use, store, transfer and protect personal data in accordance with:

  • The UK’s General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data Use and Access Act 2025 in the United Kingdom; and 
  • The Nigeria Data Protection Act 2023 (NDPA), in Nigeria. 

This Policy applies to all personal data collected and processed as we operate both in the UK and in Nigeria.

Who We Are

PSJUK is dedicated to mobilising the Nigerian diaspora in the UK and friends of Nigeria to advocate for Peace and Social Justice and sustainable development in Nigeria. We rely heavily on the help (both practical and financial) of our supporters and leverage on a network of partners to serve as a voice for marginalised communities while bringing attention to and addressing the widespread atrocities in Nigeria.

We are a registered UK charity, regulated by the Charity Commission of England and Wales (1194961). Our office is located at PSJUK Suite, Unit 2 Ebury Business Centre, 161-163 Staines Road, Hounslow, Middlesex, TW3 3JZ, UK. We do not have a physical office or contact address in Nigeria.

We are the Data Controller for the purpose of this policy and personal data we process.

Our Data Protection Representative is Abiola Aderibigbe. If you have any questions or concerns, you can contact Abiola at [email protected] or write to our postal address above. 

Data We Collect

The Personal Data we collect depends on your relationship with us. At PSJUK, we comply with the data protection principles of data minimisation and purpose limitation, and we only collect information we need. We only use information for the intended purpose.

For Volunteers and Voluntary staff 

We collect personal information such as your full name, contact information (including postal address, telephone number and email address), date of birth, sex/gender, marital status, nationality, accessibility requirements and health information. We also collect the identity data (name) and contact data (email address, telephone number and postal address) of your emergency contacts and your referees. 

For Donors and Financial Partners

We collect your name or organisation’s registered name, contact data (email address, telephone number and postal address), bank details (for direct debits), or card payment information, donation history and preferences, Gift Aid declarations (for UK donors) and records of funding agreements or financial contributions.

Any information you give us relating to your card information and bank account details is handled by a PCI DSS compliant supplier and encrypted using secure server technology.

For Supporters (newsletter subscribers, campaign participants and event attendees)

We collect your identity data, contact data, communication preferences, records of event attendance or participation, feedback, surveys or correspondence and website interaction data (IP address, cookies, browsing behaviour including web pages you visit, social media used, etc).

Why We Use Your Information

We process your personal information only when we have a valid reason to do so. In some cases, this will be because you have given us your consent, for example, when you agree to receive newsletters or share sensitive details such as accessibility or health information. At other times, we may need to process your data because it is necessary to perform an agreement we have with you, such as managing your role as a volunteer. 

We may also be required by law to process certain information to meet our legal obligations, for instance, in safeguarding, financial reporting or compliance with charity regulations in the UK and in Nigeria. Additionally, we may process your information in our legitimate interest, especially where using your data helps us to run our charity effectively for example for organising events or keeping in touch with supporters and volunteers.

In very limited cases, particularly when it involves safeguarding or urgent situations, we may also rely on recognised legitimate interests, introduced by the UK’s Data Use and Access Act, which allows us to act quickly to protect people and serve the public good.

 

How We Use Your Data 

We use personal information so that we can carry out our mission effectively and responsibly. This includes staying in touch with supporters, managing donations and fundraising, coordinating volunteers and staff, keeping accurate governance records and delivering our programmes in the UK and Nigeria. Sometimes we use data to improve how we work, for example, learning from feedback, reviewing the reach of our events, or analysing website use. 

We may also use information for safeguarding, legal compliance, or in situations where we need to protect people and communities.

Sharing and Transferring Data

We only share your personal information where it is necessary and appropriate. This may include working with trusted third-party service providers who help us deliver services such as IT support, payroll, or mailing services (for example Nation Builder)  and we make sure they handle data under strict agreements which have data protection obligations.

Also, because PSJ UK operates in both the UK and Nigeria, information about our volunteers, staff, donors, supporters and trustees may sometimes be transferred between the two countries. This means your data could be processed under different laws depending on where you are based and where it is used. In the UK, your data is protected under the UK GDPR, the Data Protection Act 2018, and the Data Use and Access Act 2025 whereas in Nigeria, it is protected under the Nigeria Data Protection Act 2023. 

We are committed to applying the same high standards of protection across both countries. Whenever data is shared between the UK and Nigeria, we ensure that proper safeguards are in place so your information remains secure, fair, and lawfully used. We never sell or rent your personal information to others.

Your Rights 

You have rights over your personal information. You can ask us what information we hold about you, request corrections if it is wrong, or in some cases ask us to delete it altogether. You can also object to or limit how we use your information, and if we are relying on consent, you can withdraw that consent at any time. If you wish, you can also ask us to transfer your information to another organisation. If you have concerns, you can contact us directly, and you also have the right to raise a complaint with the Information Commissioner’s Office (ICO) in the UK or the Nigeria Data Protection Commission (NDPC). 

Cookies, Online Data, Third-Party Websites and Links

We use ‘cookies’ on our website to help us improve its look and feel. To do this, we place cookies on your device. A cookie is a small text file which is placed on your hard drive whenever you visit a website. It collects statistics by tracking your movements and can also be used to identify when you return to a website. For more information, please read our Cookies Policy.

Our website may contain links to, or information provided by third parties. These third-party sites are outside our control and are not covered by this Privacy Policy. If you access other websites through the links we provide, please be aware that the operators of those sites may have privacy policies that differ from ours. While we cannot be responsible for the privacy practices of external websites, we take steps to safeguard your personal data by requiring our trusted partners to implement stringent controls and maintain appropriate data protection standards.

How Long We Keep Your Data

We keep your information only for as long as we need it. This means we retain it while you are actively engaged with us, and for a period afterwards if required for legal, financial, or safeguarding reasons. For example, donation records may need to be kept for several years for audit purposes, and trustee records must be retained for governance. Once information is no longer required, it is securely deleted or anonymised.

Keeping Your Data Safe

We take the security of your information seriously. We use technical measures, secure systems, and organisational safeguards to protect personal data against loss, misuse, or unauthorised access. Access to personal data is limited to people who need it to do their work, and all staff and volunteers handling personal data receive training on data protection.

Complaints and Queries

If you have questions, concerns, or complaints about how we use your information, please contact our Data Protection Representative or send a letter by post to our postal address. We will do our best to resolve your concern. 

If you are not satisfied, you also have the right to escalate your complaint to the ICO in the UK or the NDPC in Nigeria.

Updates to this Policy

PSJUK reserves the right to modify its website and/or this Privacy Policy at any time. Therefore. we may update this policy from time to time to reflect changes in law, regulation, or how we operate. Where there are material changes and/or changes that could negatively impact you, we will make reasonable efforts to notify you in advance and gave you a reasonable period of time for you to object such changes. When making smaller changes, we’ll update this notice and post a summary of the changes on our website.