سياسة الخصوصية

Last updated: 3 July 2026

Nur Springs Initiative ("NSI", "we", "us") is committed to protecting the privacy of everyone who visits nursprings.org, donates, subscribes, or creates an account with us. This policy explains what we collect, why, and what rights you have.

This policy is written in plain language and grounded in what this website actually does — it does not describe data practices we don't follow. It has not been reviewed by a lawyer; treat it as a good-faith description of our practices rather than a legally exhaustive document, and contact us if you have questions.

Who we are

Nur Springs Initiative, No. 3 Zoo Road, Kano, Nigeria (Liaison Office: Wuse II, Abuja FCT). Contact: info@nursprings.org.

What we collect

Contact form. Name, email address, country, organisation (optional), inquiry type, and your message.

Donations. If you give through our Stripe or Flutterwave checkout (once enabled), we receive your donor email, name (optional), donation amount, currency, and which fund/tier you supported. Your card details are handled entirely by Stripe or Flutterwave — they never reach our servers.

Blog accounts. If you register to write for our blog, we store your name, email address, and a securely hashed password (we never store your password itself). Articles and comments you submit are stored along with your name.

Newsletter. If you subscribe, we store your email address.

Analytics. If you accept our cookie-consent banner, Google Analytics (GA4) collects anonymised usage data (pages visited, general location, device type). IP addresses are anonymised. Nothing loads until you accept.

Server logs & rate limiting. Like most websites, our servers briefly process IP addresses to prevent abuse (e.g. spam submissions) and are not used to identify individuals.

Sensor/impact data. Data from field equipment (e.g. borehole water-level sensors) is technical, not personal.

Why we collect it

• To respond to your enquiries and process your donation
• To publish blog content you've submitted, after review
• To send updates if you've subscribed (never sold or shared for marketing by others)
• To keep the site secure and prevent abuse
• To understand how the site is used, only with your consent

Who we share it with

We do not sell your data. We share the minimum necessary with:

• Payment processors (Stripe, Flutterwave) to process donations
• Resend to send transactional email (contact confirmations, password resets)
• Google Analytics only if you've consented to analytics cookies
• Our hosting provider, to run the website

Some of these providers are based outside Nigeria (e.g. the United States), which means your data may be processed there. Each provider maintains its own security and privacy standards.

How long we keep it

• Contact submissions and donation records: retained as needed for financial recordkeeping and donor relations
• Blog accounts: retained until you ask us to delete them
• Newsletter subscriptions: retained until you unsubscribe

Your rights

Consistent with the Nigeria Data Protection Act 2023, you can ask us to:

• Tell you what data we hold about you
• Correct inaccurate data
• Delete your data (subject to legal/financial recordkeeping obligations)
• Withdraw consent for analytics or the newsletter at any time
• Export your blog account data

To exercise any of these, email info@nursprings.org.

Children's data

We do not knowingly collect personal data from children. Our Child Safeguarding Policy governs how we interact with children in our programs, separately from this website.

Security

Passwords are hashed (never stored in plain text), admin and author sessions use signed, httpOnly cookies, and form submissions are rate-limited against abuse. No system is perfectly secure, but we take reasonable, industry-standard precautions.

Changes to this policy

We may update this policy as the site changes. The date at the top shows the last revision.

Contact

Questions about this policy: info@nursprings.org, or see our Contact page.