This Privacy Policy explains how CEID Hub (Climate Emerge Innovation Development Solutions Hub, “CEID Hub”, “we”, “us”) collects, uses and protects personal data when you visit ceidhub.org, apply to our programmes, attend our events, volunteer, donate, or otherwise get in touch. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where it applies to visitors outside Nigeria, the EU and UK General Data Protection Regulation (GDPR).
1. Who is responsible for your data
CEID Hub is the data controller for personal data collected through this website and our programmes. You can reach us about any privacy matter using the details in section 12.
2. What we collect
Information you give us
- Contact and enquiry forms: your name, email address, phone number, organisation and the content of your message.
- Programme applications (GreenVET, GEIP, SNBC, ACLIF, ACIS): name, email, phone number, location, age range or education level, the track you choose, your background and motivation, and any business or project details you share.
- Event registrations: name, email, phone number and the event you are registering for.
- Job and volunteer applications: name, contact details, skills, experience, availability and anything else you choose to tell us.
- Partnership enquiries: your name, role, organisation and contact details.
- Newsletter sign-up: your email address and, where given, your name.
- Donations: online donations are processed by Paystack, our payment provider. You enter your card or bank details directly on Paystack’s secure checkout, so CEID Hub never sees or stores your full card number, CVV or banking passwords. Paystack shares with us your name, email address, the amount, date, payment reference and the last four digits and type of card used. If you give by direct bank transfer instead, we only see what your bank shows us (your name, the amount and the payment reference) and any receipt you send us by email or WhatsApp.
- WhatsApp, phone and email: your phone number, name and the messages you send us.
Information collected automatically
When you browse the site we and our analytics provider collect technical data such as your IP address (shortened where possible), browser and device type, pages visited, time spent, referring website and approximate location (city or country level). See our Cookie Policy for details.
Photos and video
We photograph and film trainings, tours and events at the hub for reporting and communications. We tell attendees when this is happening, and you can ask not to be featured.
3. How we use your data, and our lawful basis
- To assess and run programmes, events and applications, including shortlisting, onboarding, starter-kit distribution and follow-up. Basis: steps taken at your request before entering into an arrangement with us, and our legitimate interest in delivering our programmes.
- To reply to enquiries and manage partnerships and volunteering. Basis: legitimate interest and, where relevant, contract.
- To send newsletters and programme updates. Basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
- To process donations through Paystack, acknowledge them, prevent fraud and keep financial records. Basis: performance of the donation you asked us to process, legal obligation and legitimate interest.
- To measure and report our impact to funders and partners. We use aggregated or anonymised figures wherever possible. Basis: legitimate interest.
- To understand and improve the website through Google Analytics. Basis: your consent where required, otherwise legitimate interest.
- To keep the site secure and prevent spam or misuse. Basis: legitimate interest.
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Who we share it with
We only share personal data where needed, with:
- Service providers who host and run our website, email and newsletter tools (including our web host, MailPoet and Google Analytics), under terms that require them to protect it.
- Paystack (Paystack Payments Limited), which processes online donations as an independent controller for payment and fraud-prevention purposes and is certified to the PCI DSS payment security standard. Its privacy policy is at paystack.com/privacy.
- Programme partners and funders who co-deliver or sponsor a programme you join, limited to what they need, for example your name and completion status. Funders usually receive aggregated reports only.
- Authorities where the law requires it, or to protect the rights, safety and property of CEID Hub, our participants or others.
5. International transfers
Some of our providers, including Google and Paystack, may process data outside Nigeria. Where that happens we rely on the safeguards recognised under the NDPA, such as adequacy decisions, standard contractual clauses or your consent.
6. How long we keep it
- Enquiries: up to 2 years after our last contact.
- Programme and event records: for the length of the programme and up to 5 years afterwards, to meet reporting duties to funders. After that we keep only anonymised figures.
- Unsuccessful job applications: 12 months.
- Newsletter data: until you unsubscribe.
- Donation records: 6 years, for accounting purposes.
- Analytics data: 14 months in Google Analytics.
7. How we protect it
We use encrypted (HTTPS) connections, access controls limited to staff who need the data, and reputable hosting and email providers. No system is completely secure, but we will notify you and the Nigeria Data Protection Commission where the law requires it if a breach affects your data.
8. Your rights
Subject to the law, you have the right to:
- be informed about how your data is used;
- access a copy of your data;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to our processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing.
Email info@ceidhub.org to use any of these rights. We will respond within 30 days. If you are unhappy with our response you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng) or, if you live in the EU or UK, your local data protection authority.
9. Children and young people
Some programmes are open to young people. We do not knowingly collect data from children under 13 through this website. For participants under 18 we ask for the consent of a parent or guardian before enrolment.
10. Links to other websites
Our site links to Paystack, WhatsApp, Google Maps, social media and partner websites. Their privacy practices are their own, so please read their policies.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows the latest version, and significant changes will be highlighted on the site.
12. Contact us
CEID Hub (Climate Emerge Innovation Development Solutions Hub)
6 Ekiti Close, Bodija, Ibadan, Oyo State, Nigeria
Email: info@ceidhub.org
Phone: +234 703 314 6345