Privacy Policy

Effective as published on the MalaAlert website. This Privacy Policy describes how Naza Agape Foundation (“we,” “us,” or “our”) collects, uses, processes, stores, and discloses personal data obtained through the public MalaAlert information website. It does not describe future pilot or operational early-warning data practices, which will require a separate, reviewed privacy and data-governance framework before deployment.

1. Introduction and scope

This Privacy Policy applies to visitors and users of the public MalaAlert website, including people who browse pages or submit partnership, early-access, or general enquiries. If you do not agree with this Privacy Policy, you should not use or access the website. Additional notices may apply if and when registered accounts, apps, or operational alert services are launched.

2. Information we collect

2.1 Information you provide

Enquiry information: If you use the contact or early-access form, you may provide your name, email address, subject, organisation details, and message content. Please do not include health records, sensitive personal data, confidential case information, or emergency medical details through that channel.

Voluntary correspondence: If you contact us by email or other channels we publish, we may receive the information you choose to include in that correspondence.

Accounts, payments, and health inputs: The public website does not currently offer user account registration, payment processing, or collection of malaria diagnosis, treatment, or other clinical health data. If those features are introduced later, we will publish updated practices before collecting such information.

2.2 Information we collect automatically

Usage and technical data: Hosting, security, and delivery providers may process routine technical information such as IP address, browser type, device or operating-system details, request time, referring URL, pages requested, and error logs to deliver, protect, and maintain the website.

Cookies and similar technologies: The website may use cookies or similar technologies that are necessary for basic operation, security, or performance. We do not claim to use advertising profiles or sell personal information through this site. If analytics or additional cookies are introduced, we will update this policy and provide any required choices.

2.3 Information from third parties

We do not currently offer third-party social login on the public website. If you arrive via a partner referral or public source, we may receive limited context needed to understand the enquiry (for example, a campaign or referral label), but we do not purchase marketing lists for this site.

3. How we use your information

• Respond to enquiries: to reply to partnership, early-access, research, or general messages and assess possible collaboration.
• Operate and protect the website: to host content, diagnose issues, prevent abuse, and maintain security and availability.
• Organisational records: to keep appropriate records of correspondence and collaboration discussions.
• Improve public information: to understand, in aggregate where possible, how the website is used and how messaging can be clearer.
• Legal compliance: to comply with applicable law, respond to lawful requests, and enforce our Terms of Service.

4. Lawful bases for processing

Where Nigerian data-protection law or other applicable frameworks require a lawful basis, we generally rely on one or more of the following:

• Legitimate interests: operating an information website, responding to partnership enquiries, securing the site, and improving public communications, provided those interests are not overridden by your rights.
• Consent: where you voluntarily submit an enquiry or where we seek consent for a specific purpose.
• Legal obligation: where processing is necessary to comply with a legal duty applicable to us.
• Contract or pre-contract steps: where processing is needed to discuss or enter into a collaboration arrangement you request.

If you are located in a jurisdiction with additional requirements (including the EEA or UK), we will apply those bases as required for processing that relates to you.

5. Disclosure of your information

• Service providers: hosting, email, security, and similar vendors that help us operate the website, under obligations to use data only as needed to perform services for us.
• Advisers and partners: limited sharing with professional advisers or prospective implementation partners when reasonably necessary to assess an enquiry you initiated, subject to confidentiality expectations.
• Legal compliance and protection: disclosure to authorities or other parties when we believe in good faith it is required by law or needed to protect the rights, safety, or property of Naza Agape Foundation, users, or the public.
• Organisational changes: if MalaAlert or related assets are transferred as part of a reorganisation or similar transaction, information may move with them under continued confidentiality and privacy expectations.

We do not sell personal information collected through this public website.

6. Cookies and tracking technologies

Cookies or similar technologies may be used for essential website operation and security. Browser settings generally allow you to refuse or delete cookies, though some site features may not work as intended if essential cookies are blocked. If we later introduce analytics, marketing, or other non-essential tracking, we will update this section and provide appropriate choices.

7. Data security

We use reasonable technical and organisational measures appropriate to the limited nature of public-website data, such as encrypted transmission where supported by our hosting stack, access controls, and vendor security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention

We retain enquiry and technical information only as long as reasonably necessary for the purposes described in this Privacy Policy, including responding to messages, maintaining organisational records, securing the website, and meeting legal obligations. Retention periods may vary based on the nature of the enquiry, ongoing collaboration discussions, and applicable law.

9. Children’s privacy

The public website is intended for general information and organisational enquiries, not for children to submit personal data. We do not knowingly solicit personal data from children through the enquiry form. If you believe a child has provided personal data to us through the website, contact us and we will take appropriate steps to delete it where required.

10. Your rights and choices

10.1 Access, correction, and deletion

Depending on applicable law, you may have rights to request access to, correction of, or deletion of personal data we hold about you in connection with this website, subject to legal exceptions such as retention or security obligations. To exercise these rights, use the contact page. We may need to verify your identity before fulfilling a request.

10.2 Restriction, objection, and portability

Where applicable law provides additional rights (for example, restriction of processing, objection, or data portability), you may raise those requests through the same contact channel. We will respond in accordance with the laws that apply to your request.

10.3 Marketing communications

The public website does not currently operate a marketing email list. If we later send optional updates or newsletters, you will be able to opt out using the instructions provided in those messages. Opting out does not affect messages needed to respond to an enquiry you submitted.

11. International data transfers

Personal data submitted through the website may be processed or stored using service providers located outside Nigeria, including in countries that may not provide the same legal protections. Where required, we will take appropriate steps to protect transferred data in line with applicable law and our vendor arrangements.

12. Third-party links and services

The website may link to third-party websites, tools, or resources that we do not operate. We are not responsible for their content, privacy practices, or security. We encourage you to review the privacy statements of any third-party services you use.

13. Future early-warning services

Any future collection of community, climate, health-system, or individual health-related data for MalaAlert pilots or operational services will be governed by purpose-specific consent, access, retention, safeguarding, ethics, and security protocols. Those practices are still being designed and will be published after legal, ethical, and partner review. This public-site Privacy Policy does not authorise that broader processing.

14. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or website operations. Updated versions will be posted on this page. Continued use of the website after an update constitutes acceptance of the revised policy, except where applicable law requires a different notice or consent approach.

15. Contact information

Questions about this Privacy Policy, our data practices, or your privacy rights can be submitted through the contact page.

16. Important review notice

This public-site Privacy Policy is an interim, plain-language statement and should be reviewed by qualified Nigerian privacy counsel before operational health-data processing or community alert services begin.