Privacy Policy

1. Introduction

Hilth Foundation ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or use our services.

2. Information We Collect

Information You Provide

When you make a donation or subscribe to our newsletter, we may collect:

• Name (first and last)
• Email address
• Donation amount

Payment Information

Important: We do NOT collect, process, or store your payment card information. All payment processing is handled securely by Paystack, a PCI-DSS Level 1 certified payment processor. Your card details are entered directly into Paystack's secure payment form and never pass through our servers.

3. How We Use Your Information

We use the information we collect to:

• Process your donations through our payment processor (Paystack)
• Send you donation receipts and confirmations
• Send newsletters and program updates (if you've subscribed)
• Improve our website and services
• Comply with legal obligations

4. Data Sharing and Third Parties

Payment Processing

When you make a donation, your information is shared with Paystack for payment processing. Paystack's privacy policy can be found at: https://paystack.com/privacy

We Do NOT:

• Sell your personal information to third parties
• Use your information for marketing purposes without your consent
• Share your data with advertisers

5. Data Security

We implement industry-standard security measures to protect your personal information:

• HTTPS encryption for all data transmission
• Input validation and sanitization to prevent malicious attacks
• Content Security Policy (CSP) headers to prevent XSS attacks
• Secure payment processing through PCI-DSS certified providers

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request limitation of processing your data
• Portability: Request transfer of your data to another organization
• Objection: Object to our processing of your data

To exercise any of these rights, please contact us using the information below.

7. Cookies and Tracking

Our website does not currently use cookies or tracking technologies. We do not use analytics services to track your browsing behavior.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Donation records may be retained for tax and accounting purposes as required by Ghanaian law.

9. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.