Privacy notice

Last updated 4 October 2026

Who we are

Olive Rights to Health Initiative (“ORHI”, “we”), registered with the Corporate Affairs Commission as CAC/IT/NO. 82664, is the data controller for personal data collected through this website. Our head office is at KM 15 Abuja–Keffi Expressway, Akanaba Hotel and Garden Junction, El-Kabir Street, beside Goshen Life Private Hospital, New Nyanya, Karu, Nasarawa State, Nigeria. Contact our data protection lead at info@oliverightng.com.

What we collect and why

• Newsletter: your email address, first name if you give it, the topics you choose, and a record of when you gave consent. We use this only to send the emails you asked for. Lawful basis: your consent.
• Contact, partnership, media, volunteering and careers forms: your name, email, phone number and organisation if given, and your message, so we can reply. Lawful basis: our legitimate interest in answering you, or steps you ask us to take before an agreement.
• Get help form: what you want us to call you, how to contact you safely, and anything you choose to tell us. Only our safeguarding focal person can read it. We never ask for your HIV status, sexual orientation or other health details on this website. Lawful basis: your consent and, where needed, your vital interests.
• Browser notifications: if you turn them on, your browser gives us a subscription address and keys from its push service (Google, Mozilla, Microsoft or Apple), and we note the browser type. We don’t receive your name, email or location. We use it only to tell you when we publish news. Turn them off at any time from the “Get notifications” button in the footer or in your browser settings. Lawful basis: your consent.
• Campaign actions: your first name, state and, if you want updates, your email address. Lawful basis: your consent.
• Donations: your name, email, the amount and a payment reference. Card and bank details are handled by our payment provider, Paystack; we never see them. Lawful basis: to process your gift, and our legal duty to keep financial records.
• Technical data: our hosting provider keeps short-lived server logs (such as IP addresses) to keep the site secure and working.

Cookies and tracking

This website does not use advertising or tracking cookies, and we do not sell or share data with advertisers. A strictly necessary cookie is set only when staff sign in to the website’s admin area. Your browser’s own storage remembers whether you have closed our newsletter invitation, so we don’t show it again; this never leaves your device. If we add privacy-friendly statistics in future, they will not use cookies or identify you.

Who we share data with

We use trusted service providers who process data only on our instructions and under contract:

• our website hosting and database providers
• our email delivery provider, to send newsletters and replies
• Paystack, to process donations

Some of these providers store data outside Nigeria. Where they do, we rely on the safeguards the Nigeria Data Protection Act 2023 requires, such as contractual protections. We never share your data with anyone else unless the law requires it.

How long we keep it

• Newsletter: until you unsubscribe. We then keep only your email address on a do-not-contact list, so we never email you by mistake.
• Browser notifications: until you turn them off, or your browser tells us the subscription has ended.
• Enquiries: 24 months after our last reply.
• Get help messages: until your case is closed, and no longer than 12 months, unless you agree otherwise.
• Donation records: 6 years, to meet financial and audit requirements.

Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

• be told how your data is used, and get a copy of it
• have inaccurate data corrected
• have your data deleted, or its use restricted
• object to how we use it, and withdraw consent at any time
• receive your data in a portable format

To use any of these rights, email info@oliverightng.com. We reply within 30 days. If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission.

Keeping data safe

Data is encrypted in transit, access is limited by role to the staff who need it, every account is personal, and messages from the Get help form are restricted to safeguarding. We review access every quarter.

Changes

We will update this notice when our practices change and show the date at the top.