Privacy Policy
Last updated: 7 October 2026
1. Who we are
This website, donate.socasemp.org, is run by Sought-Out Cities Arts, Skills and Empowerment Initiative ("Socasemp", "we", "us"), registered with the Corporate Affairs Commission as SOUGHT-OUT CITIES ARTS, SKILLS AND EMPOWERMENT INITIATIVE, CAC/IT/NO 97601, of D2, Unit 7, Jacob Mews Estate, Yaba, Lagos State, Nigeria. We are the data controller for the personal data described here, under the Nigeria Data Protection Act 2023 (NDPA). For privacy questions or requests, email support@socasemp.org.
2. What we collect
- When you give: your name, email, the amount, currency and payment method, and the payment reference. For bank transfers we also ask for the name on the account you sent from. For item and property gifts we ask what it is, where it is and its estimated value.
- If you give on behalf of an organisation: the organisation's name, and your name as its contact person.
- If you ask to keep track of your gifts, give by transfer or offer an item: your phone number, WhatsApp number and country.
- If you create a donor account: your name (and your organisation's name, for an organisation's account), email, password, country, phone and (optionally) WhatsApp.
- If you are an ambassador: your name, email, username, sex, country, phone, WhatsApp, Naira bank account, USDT wallet address, when you accepted the ambassador terms, your stipend and payouts, and the set-up of your authenticator app.
- Automatically: your IP address and the time, when you submit a form, sign in or open an ambassador's link (to stop spam and password guessing); the country you connect from (worked out on each visit and not stored); and, if you agree, the ambassador whose link you used (see section 5 and our Cookie Policy).
We never receive or store your card number, card security code, bank login or crypto wallet keys. You enter those on the payment provider's own secure page or pop-up.
3. Why we use it, and our legal basis
| Purpose | Legal basis (NDPA section 25) |
|---|---|
| Take and confirm your gift, send your receipt, keep financial records | Performance of a contract with you; legal obligation (accounting) |
| Confirm your email with a code before sending receipts | Legitimate interest (accurate records and preventing fraud) |
| Run your donor or ambassador account, points, badges and statements | Performance of a contract with you |
| Pay ambassador stipends | Performance of a contract with the ambassador; legal obligation (records) |
| Credit the ambassador who referred you | Legitimate interest (running our fundraising programme); consent for the 30-day referral cookie |
| Contact you about a gift that is pending, failed or unfinished | Legitimate interest (completing gifts people started) |
| Protect the site from spam, bots and attacks | Legitimate interest (security) |
| Show the gift form in your likely currency | Legitimate interest (a simpler form); nothing is stored |
We do not sell your data, show advertising, or use your data for automated decisions that affect you.
4. Who we share it with
- Socasemp's team: administrators who confirm gifts and pay stipends.
- Payment providers: Paystack, Flutterwave and NOWPayments process your payment under their own privacy policies.
- Service providers that run the site for us under contract: Cloudflare (hosting and security), Supabase (database and accounts), Resend (email), Google Fonts (the site's lettering) and our main website's host (project pictures). They may only use your data to provide their service to us.
- Ambassadors: see section 5.
- Authorities: when the law requires it.
5. Ambassadors
If you give through an ambassador's link, that ambassador is credited and can see some of your details on their private ambassador page:
- For confirmed gifts: your name (or your organisation's), your email, the date and the amount, so they can thank you.
- For gifts that are still pending, failed or were not finished: your name, email, phone and WhatsApp, so they can help you complete them.
Please note that the ambassador sees your email address. Ambassadors agree in writing to use your details only to thank you and help with your gifts, and never to sell, share, give out or outsource them, or use them for anything else. If an ambassador misuses your details, tell us at support@socasemp.org and we will act, including removing them.
Once you have given through an ambassador and confirmed your email, your later gifts with the same email are credited to the same ambassador. To stop being linked to an ambassador, contact us. If you delete your account, the ambassador no longer sees your details.
6. Transfers outside Nigeria
Some of our providers store or process data outside Nigeria, including in the United States, the United Kingdom (where our main website is hosted) and Ireland (European Union, where our database is hosted). Where they do, we rely on the safeguards the NDPA allows (sections 41 to 43), such as the provider's contractual data protection terms, and only send what the service needs.
7. How long we keep it
- Donation and payout records: 6 years after the gift or payout, for accounting and audit.
- Accounts: until you delete your account or ask us to.
- When you delete your account: it is closed straight away: you are signed out and can't sign in, and an ambassador's link stops working. We keep it for 30 days in case you change your mind; to restore it, email support@socasemp.org from the address on the account within those 30 days. After 30 days your account and contact details are removed for good. Your gift records stay for our accounts with only your name (or your organisation's name) on them, and an ambassador's unpaid stipend is forfeited.
- Email codes: they stop working after 10 minutes and are deleted after 30 days.
- Security data (IP addresses): 24 hours.
- The referral cookie: 30 days.
Donors can download statements of their gifts for the last 12 months from their donor page.
8. How we protect it
All pages use encrypted connections (HTTPS). Passwords are stored scrambled and never visible to us. Administrators must use an authenticator app on every sign-in, and ambassadors must use one to change their payout details. Forms are protected against bots, and repeated wrong passwords or codes are blocked.
9. Your rights
Under the NDPA you can ask us to:
- give you a copy of your data;
- correct it;
- delete it (unless we must keep it, for example for accounting); you can also delete your account yourself from your donor or ambassador page;
- limit how we use it, or object to a use based on our legitimate interest;
- send it to you or another organisation in a common format;
- withdraw any consent you gave (for example to the referral cookie), without affecting what we did before.
Email support@socasemp.org from the address we have on file. We reply within 45 days. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng). If you live in the UK or EU, you also have these rights under the GDPR and can complain to your local data protection authority.
10. Children
Donor and ambassador accounts are for people aged 18 and over. We do not knowingly collect data from children. If you think a child has given us their details, contact us and we will delete them.
11. Changes
We will post any changes here with a new date. If a change is significant, we will email account holders before it takes effect.
12. Contact
Sought-Out Cities Arts, Skills and Empowerment Initiative, D2, Unit 7, Jacob Mews Estate, Yaba, Lagos State, Nigeria. Email: support@socasemp.org. Phone: +234 912 191 8309.