Privacy Policy

Unleash Your Potential Foundation ("we") handles the personal information of parents, guardians and children with care. This policy explains what we collect, why, and your rights. Data controller details: Placeholder: To be confirmed by the foundation

What we collect

• Parent or guardian details: name, email, phone number, state and local government area, relationship to the child, and contact preference.
• Child details needed to assess the application: name, date of birth, education level, class, school and, where needed, a student identification number.
• The school fees due, and your child's report card (subjects, scores and grades). Report cards are read by software on our own servers; they are not sent to outside services.
• Supporting documents you upload, such as fee invoices, report cards and school receipts.
• Account and security records, such as sign-in times and actions taken in your account.

The bank account you choose for the grant (yours or the school's): bank and account number. Account numbers are encrypted, and we only ever show the last 4 digits. We do not ask for your BVN, NIN, bank card, PIN or passwords.

Why we use it

• To assess eligibility, verify information with the school, and make funding decisions.
• To pay approved grants into the account you choose, check the school's receipt, and keep accurate financial records.
• To contact you about your application.
• To protect the programme against fraud and to meet legal and audit obligations.

Our lawful bases include your consent and our legitimate interests in running a fair, accountable programme. These are to be confirmed through legal review.

Who can see it

Only authorised foundation staff with a specific role can view application details and documents, and every access to sensitive records is logged. We share information with the school only as needed to verify enrolment and fees, and with our service providers (hosting, document storage, email and payments) under appropriate agreements. Some of these providers store data outside Nigeria. Details of transfer safeguards: Placeholder: To be confirmed by the foundation

How long we keep it

We keep application records for as long as needed for the programme and for audit purposes, then delete or anonymise them. Unsubmitted drafts are deleted after a period of inactivity. Retention periods: Placeholder: To be confirmed by the foundation

Your rights

You can ask to access, correct or delete your information, or withdraw consent, through your account or by contacting us. Some records, such as payment records, may need to be kept for legal reasons. You may also complain to the Nigeria Data Protection Commission.

Security

Documents are stored privately and are only available through short-lived links to authorised users. Passwords are stored using strong one-way hashing. We will never ask for your password by phone, email or message.