Privacy notice
How we look after personal data
This notice explains what personal data Ken David Orphanage Home and Widows Empowerment Center collects, why, who sees it, how long we keep it, and the rights you have under the Nigeria Data Protection Act 2023.
Who we are
KEN DAVID ORPHANAGE HOME AND WIDOWS EMPOWERMENT CENTER is a foundation registered with the Corporate Affairs Commission of Nigeria under CAC/IT/NO 151423. Our address is No. 2 Onovo Street, Topland Market, Ebony Paint Road, Gariki, Enugu, Enugu State, Nigeria. We decide how and why the personal data described here is used, which makes us its data controller under the Nigeria Data Protection Act 2023 (“the Act”).
For anything in this notice, including any request about your data, contact us at admin@kendavidorphanage.org or on WhatsApp at +234 916 468 4671.
What we collect and why
If you give to us
Your name, phone number, email address, the amount and date of your gift, the programme you chose, and the payment or transfer reference. We use this to record your gift in our accounts, to thank you, to tell you how it was used, and to keep the financial records the law requires. When online card giving opens, card details are entered on Paystack's secure page and never reach us.
If you are a widow on our register
Your name, a permanent KDWE number, your phone number, where you live, your household, your needs and your next of kin, and a record of each time you receive support, including your signature on the distribution list. We use this to serve widows fairly and in turn, and to account for every distribution to the people who fund it.
If a child is in our care
The child's name, a permanent KDC number, date of birth, school, health and medical needs, and the details of their parent, guardian and guarantor, together with the written placement agreement. We use this to care for the child safely, to meet their health and education needs, and to work towards their return to family. See Children's data below.
If you appear in our photographs, films or stories
Your image, your words, and the consent level you or your guardian gave, with who recorded it and when. We use this to show our work honestly, and only at the level of consent recorded.
If you contact us or visit
Your name, contact details and what you tell us, so that we can reply, arrange your visit and keep a record of partners and supporters.
If you work or volunteer with us
The details needed to engage you, pay you where you are paid, and keep you and the children safe.
Health information, and in some cases religious belief, are sensitive personal data under the Act. We collect them only where they are needed for the purposes above, and we protect them more strictly.
Our lawful basis
The Act allows us to use personal data only where we have a lawful basis. Ours are:
| Purpose | Lawful basis |
|---|---|
| Recording and processing gifts | Performance of our agreement with you, and our legal obligation to keep financial records |
| Thanking donors and reporting how gifts were used | Our legitimate interest in accounting to the people who fund us. You may object at any time |
| News and appeals by email or WhatsApp | Your consent, which you may withdraw at any time |
| Enrolling and serving widows | Your consent, given when you join the register |
| Caring for children in our care | The consent of the child's parent or guardian, and, where a child's health or safety is at risk, the protection of their vital interests |
| Photographs, films and stories | Your consent, or your guardian's consent for a child, at the level recorded |
| Safeguarding and reporting concerns to the authorities | Our legal obligations and the protection of the child's vital interests |
| Answering enquiries and arranging visits | Our legitimate interest in responding to people who contact us |
Where we rely on consent, you may withdraw it at any time, and withdrawal does not affect what was done lawfully before it.
Children's data
We treat children's data with particular care. We act on the consent of a child's parent or guardian, and the rights in this notice may be exercised on the child's behalf by that parent or guardian. As children grow older, we listen to their own views about how their information and images are used.
We never publish the reason a child is in our care, any detail of a placement, or any family's arrangement with us. No child appears in our media without a recorded consent level, as set out in our safeguarding statement.
Who we share it with
We never sell personal data. We share it only as follows:
- Service providers who run systems for us and may use the data only on our instructions: Supabase (our website database and file storage), Vercel (website hosting), Google (email and our records system) and, once online giving opens, Paystack (card payments).
- Messaging platforms, such as WhatsApp, when you choose to contact us through them.
- Funders carrying out due diligence, who may be shown records about individual beneficiaries in confidence, only as far as their review needs. Our published figures are counts and never identify anyone.
- The authorities, such as the police or social welfare services, where the law requires it or a child's safety depends on it.
Data held outside Nigeria
Some of our service providers store data on servers outside Nigeria. Where this happens, we rely on the safeguards the Act permits, such as the provider's contractual commitments to protect personal data to an adequate standard. You can ask us for details of these safeguards.
How long we keep it
We keep personal data only as long as we need it, and then delete it or make it anonymous.
| Record | How long |
|---|---|
| Gifts and donor details | Six years after the end of the financial year in which the gift was made |
| The widows register and distribution records | While you are on the register, then six years after you last received support |
| Records of children in our care | Until the child's 25th birthday, or six years after they leave our care, whichever is later |
| Photographs, films and stories | Until consent is withdrawn or we no longer use them |
| Consent records | For as long as we keep the image or story, and for six years after we remove it |
| Safeguarding records | As long as the law or the protection of the child requires, and at least as long as the child's records |
| Enquiries and messages | Two years after the conversation ends |
How we protect it
Our records are held in systems that only authorised staff can open, each with their own account and access limited to what their role needs. Data travels over encrypted connections, and our records are backed up. If a breach puts your rights at risk, we will tell the Nigeria Data Protection Commission and, where required, you.
Your rights
Under the Act you have the right to:
- be told how your personal data is used, as this notice does;
- have a copy of the personal data we hold about you;
- have inaccurate or incomplete data corrected;
- have your data deleted where we no longer have a lawful reason to keep it;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on our legitimate interests;
- receive your data in a commonly used format, or have it sent to another organisation;
- withdraw your consent at any time, including consent to appear in our photographs, films or stories;
- not be subject to decisions made solely by automated means. We make none;
- complain to the Nigeria Data Protection Commission.
How to exercise your rights
Email admin@kendavidorphanage.org, message us on WhatsApp, or tell any member of our staff. You do not need to use any particular words or form. We may ask you to confirm who you are before we act, so that we never release someone's data to the wrong person. There is no charge.
We will respond without undue delay, and within 30 days.
To withdraw consent to an image or story, tell us which one. We will take it down from this website and from our own social media channels promptly. We cannot recall copies other people have already shared, but we will ask them to remove them.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You may also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
This website and cookies
This website does not use advertising or analytics cookies, and it does not track you. Videos and the map are not loaded until you press play or ask to see the map. When you do, YouTube or Google Maps may set their own cookies under their own privacy policies. Our hosting provider keeps short-term technical logs to keep the site secure. If we add analytics, we will update this notice first.
Changes to this notice
We will update this notice when our practices change, and the date at the top of the page will change with it. This version was last updated on 30 September 2026.