Privacy Policy

Introduction

Endeavor High Impact Entrepreneurship LTD/GTE (“we,” “our,” or “us”) is committed to safeguarding the privacy and security of individuals who engage with us, including entrepreneurs, donors, partners, staff, job applicants, and stakeholders (“you”). This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with the Nigeria Data Protection Act, 2023 (NDPA 2023) and other relevant data protection laws. This Policy applies to all personal data collected by Endeavor High Impact Entrepreneurship LTD/GTE, whether through our website, events, programs, partnerships, job applications, or other engagements. By interacting with us, you consent to the collection and processing of your data in accordance with this Policy.

 

Scope of This Policy

This Privacy Policy applies to all forms of personal data we collect, including but not limited to:

  • Information collected through our website, email communications, and event registrations.
  • Data gathered from program applications, funding requests, and networking interactions.
  • Information shared by partners and third-party collaborators.
  • Any personal data provided to us through contractual engagements.
  • Personal information provided by job applicants during the recruitment process.

 

Types of Data We Collect

We collect various categories of personal data, including but not limited to:

  • Identification Data: Full name, title, phone number, email address, postal address, gender, date of birth, nationality, and professional details.
  • Financial Information: Bank account details, transaction records, and donation history.
  • Communications Data: Emails, phone calls, surveys, feedback, and social media interactions.
  • Event and Program Participation Data: Attendance records, registration details, and feedback forms.
  • Technical Data: IP addresses, device type, browser type, operating system, and website usage statistics.
  • Employment and Recruitment Data: Resumes, employment history, references, background checks, academic qualifications, and any other information provided during job applications.
  • Photographic and Video Data: Images, videos, and recordings from events, training sessions, and promotional activities.

 

How We Collect Data

We obtain personal data through the following means:

  • Direct Collection: When you voluntarily provide data through forms, emails, website interactions, job applications, or program applications.
  • Automated Technologies: We may collect technical data via cookies, website analytics, and security monitoring systems.
  • Third-Party Sources: Data may be obtained from partner organizations, publicly available sources, and external service providers.

 

Lawful Basis for Processing

We process personal data based on the following legal grounds:

  • Your consent when you voluntarily provide information for specific purposes.
  • Legitimate interests in advancing our mission, improving our services, and engaging with stakeholders.
  • Legal obligations to comply with applicable regulatory requirements.
  • Contractual necessity when processing data related to agreements with donors, employees, job applicants, or service providers.

 

Purpose of Data Processing

We use personal data for the following purposes:

  • Managing and facilitating programs, initiatives, and events.
  • Processing donations, financial transactions, and maintaining financial records.
  • Engaging with stakeholders through communications, newsletters, and partnership collaborations.
  • Enhancing website usability, improving user experience, and analyzing website traffic.
  • Meeting legal, regulatory, and compliance requirements.
  • Ensuring security, preventing fraud, and monitoring compliance with our policies.
  • Managing recruitment processes, evaluating job applications, and communicating with job applicants.

 

Data Retention

We retain personal data only for as long as necessary to fulfill the intended purposes outlined in this Policy. Retention periods vary depending on the type of data and the applicable legal requirements. When data is no longer required, we securely delete, anonymize, or archive it. For job applicants, personal data is retained for the duration of the recruitment process and may be stored for up to six (6) months after the process concludes unless the applicant requests deletion sooner or legal requirements mandate longer retention.

Data Retention Principles

  • Necessity: We collect and retain only the minimum data required by law, regulatory requirements, or best practices to provide services or respond to inquiries.
  • Legitimacy: Data processing is limited to lawful and justified purposes that comply with the NDPA 2023.
  • Security: We implement technical and organizational measures to ensure data security, confidentiality, integrity, and availability.
  • Compliance: Our data retention aligns with applicable legal frameworks, including the Nigeria Data Protection Act and other international data protection standards.

 

Data Retention Schedule

The following table provides the retention periods for different categories of data processed by Endeavor High Impact Entrepreneurship LTD/GTE:

INSERT TABLE

 

Secure Data Deletion

Upon expiration of the retention period, Endeavor High Impact Entrepreneurship LTD/GTE ensures that personal data is securely deleted, anonymized, or archived, depending on the necessity and legal obligations. Secure deletion methods include:

  • Data Anonymization: Irreversible transformation of data to prevent identification.
  • Secure Digital Deletion: Removal of electronic records using industry-standard deletion protocols.
  • Physical Destruction: Secure shredding of paper records containing personal data.

Review and Updates

This Data Retention Schedule is reviewed periodically to ensure compliance with applicable regulations and evolving best practices. Any changes to retention policies will be communicated accordingly. For inquiries regarding data retention, contact: Data Protection Officer (DPO) nigeria@endeavor.org

 

Data Security Measures

We implement robust technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. Our security protocols include:

  • Encryption of sensitive data.
  • Access control and authentication mechanisms.
  • Secure storage and transmission of data.
  • Regular security audits and vulnerability assessments.
  • Incident response procedures for potential data breaches.

 

Job Applicants Data

Application Information

When you apply for a position at Endeavor High Impact Entrepreneurship LTD/GTE, we collect:

  • Full name, contact details, work history, and educational records.
  • Personal details of referees, next of kin, and guarantors.
  • Providing this information is essential for us to process your application.

Data Usage for Recruitment

Endeavor High Impact Entrepreneurship LTD/GTE uses this information to:

  • Assess skills and experience against job requirements.
  • Track feedback and interactions during recruitment.

With your consent, we may also use this information for future recruitment opportunities.

Data Retention

We retain application data for a maximum period of six (6) months. For deletion requests, please contact nigeria@endeavor.org

 

Children’s Privacy

Our website and digital services are not directed toward children under 13. We do not knowingly collect personal data from minors. If we learn that we have inadvertently collected personal data from a child, we will take immediate steps to delete the information.

For more details, refer to Section 31 of the NDPA 2023.

 

Caveat On Website Links

Our website may contain links to external sites operated by third parties. These links are provided for convenience only and do not constitute an endorsement of those sites.

We encourage users to review the privacy policies of any third-party websites before sharing personal data.

 

Data Sharing and Third-Party Disclosure

We do not sell personal data. However, we may share data with:

  • Service providers who assist us with operations, IT support, cloud storage, and communication tools.
  • Regulatory authorities where disclosure is required by law.
  • Partners and affiliated organizations involved in collaborative programs or initiatives.
  • Event organizers and sponsors, in cases where participation requires data sharing.
  • Recruitment agencies and background check service providers in cases where job applicants undergo verification processes.

When engaging third parties, we ensure that they comply with relevant data protection laws and implement adequate security measures.

 

International Data Transfers

In cases where personal data is transferred outside Nigeria, we ensure that appropriate safeguards, such as contractual clauses or data protection agreements, are in place to protect your data.

Your Data Protection Rights

Under NDPA 2023, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request corrections to inaccurate or outdated data.
  • Right to Erasure: Request deletion of your data where legally permissible.
  • Right to Restrict Processing: Limit how we use your personal data under certain circumstances.
  • Right to Data Portability: Request transfer of your data in a machine-readable format.
  • Right to Object: Withdraw consent or object to processing based on legitimate interests.
  • Right to Lodge a Complaint: Report concerns to the Nigerian Data Protection Commission (NDPC).

To exercise any of these rights, please contact our Data Protection Officer (DPO) at: nigeria@endeavor.org

 

Cookies and Tracking Technologies

Our website uses cookies to enhance user experience, track website traffic, and optimize performance. You can adjust cookie settings through your browser preferences.

 

Policy Updates and Amendments

We may update this Privacy Policy periodically to reflect changes in legal requirements or operational practices. The most recent version will always be available on our website. Significant changes will be communicated through official channels.

 

Contact Information

If you have any questions or concerns regarding this Privacy Policy or your data rights, please contact our Data Protection Officer at:

Endeavor High Impact Entrepreneurship LTD/GTE

1st Floor, Plot 952/953 Idejo Street, Victoria Island, Lagos, Nigeria.

Email: nigeria@endeavor.org

By engaging with Endeavor High Impact Entrepreneurship LTD/GTE, you acknowledge and agree to the terms outlined in this Privacy Policy.