1. We never sell or rent your personal information to third-party data brokers.
2. Donors can choose to donate anonymously to the public at any time.
3. Organizers undergo identity and BVN verification solely to prevent fraud and satisfy Central Bank of Nigeria anti-money laundering requirements.
1. Overview & Regulatory Commitment
CrowdAlt, created and operated by TRANZT DIGITALS LIMITED (RC-7612345), is committed to protecting the privacy, confidentiality, and security of all personal data entrusted to us. This Privacy Notice describes our practices under the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Commission (NDPC) guidelines, and applicable international privacy frameworks.
2. Information We Collect
The categories of personal data we collect depend on how you interact with CrowdAlt:
Full name, email address (to deliver automated donation receipts), optional words of encouragement, donation amount, voluntary tip amount, payment rail channel (e.g. card, transfer, USSD), and anonymity preferences.
Full name, email address, Nigerian telephone number, password hash, campaign story, supporting documentation (medical bills, school admission letters), 10-digit NUBAN bank account number, bank code, and 11-digit Bank Verification Number (BVN) used strictly for account holder verification.
IP address, device type, browser metadata, and cookie tokens strictly necessary for secure authentication and regional currency preference.
3. How We Use Your Information
- Fulfilling Donations: Processing your payments through our licensed payment gateway partners and crediting funds to verified campaigns.
- Fraud Prevention & Verification: Validating that campaign organizers are authentic individuals or registered charities before funds are released.
- Automated Receipts: Sending donors clear electronic receipts confirming the net donation and payment gateway processing fee.
- Platform Updates: Notifying organizers of new donations, milestone completions, and payout settlements.
4. Payment Security & Zero Card Storage
CrowdAlt never handles, processes, or stores your primary debit or credit card number, expiration date, or CVV security code on our application servers. Payment data is encrypted via TLS 1.3 and handled directly by Paystack, a licensed and audited PCI-DSS Level 1 payment processor.
5. Information Sharing & Third Parties
We share your data strictly with the following trusted entities:
- Licensed Payment Gateways: Paystack and partner settlement banks for transaction execution and payout routing.
- Regulatory & Law Enforcement Authorities: When compelled by subpoena, court order, or Central Bank of Nigeria anti-money laundering mandates.
- Cloud Infrastructure: High-security cloud databases with end-to-end data encryption at rest and in transit.
We do not sell, rent, or trade your personal data to commercial marketers or external advertising networks.
6. Data Retention & Storage
We retain donation records, receipt logs, and campaign audit trails for a minimum period of six (6) years in accordance with Nigerian financial record-keeping standards and tax compliance regulations. Following this statutory window, inactive data is safely purged or anonymized.
7. Your Rights under the NDPA
Under the Nigeria Data Protection Act 2023, you hold comprehensive rights over your personal data:
Request a full copy of the personal information CrowdAlt holds regarding you.
Request correction of inaccurate or incomplete contact or campaign information.
Request deletion of your profile, subject to statutory financial retention laws.
Object to specific processing of your data on legitimate grounds.
8. Contact Our Data Protection Officer
If you wish to exercise any of your statutory rights or have questions about our data practices:
Data Controller: TRANZT DIGITALS LIMITED (RC-7612345) • CrowdAlt Platform
Data Protection Officer (DPO): privacy@crowdalt.org
Regulatory Compliance: Nigeria Data Protection Commission (NDPC) Registered
Address: Victoria Island, Lagos State, Nigeria