Privacy Policy

KindGifts (“we”, “us”) is operated by Sebeccly Cancer Care, a nonprofit registered in Nigeria since 2006. We are the data controller for the information described in this policy.

• Account details — name, email address, phone number and password for anyone who registers as a patient, donor or partner hospital.
• Campaign content — the story, photographs, funding goal and payout bank details you submit when creating a campaign.
• Verification documents— medical reports, hospital bills, national ID and guarantors’ forms uploaded for review.
• Donation records — amount, currency, timestamp and the payment reference returned by our payment processor. We never receive or store your full card number.

• To verify that a medical need is genuine before a campaign goes live.
• To publish approved campaigns and show donors where their gift is going.
• To disburse raised funds to the verified beneficiary or partner hospital.
• To detect fraud, duplicate invoices and document tampering.
• To send you campaign updates and service notices by email and WhatsApp.

Documents uploaded for verification are visible only to the KindGifts clinical verification team and the reviewing administrators. They are never displayed on a public campaign page, never shared with donors, and never sold or licensed to third parties. Donors see only the outcome of verification — a verified badge — not the underlying records.

We share data only with the processors needed to run the platform:

• Our payment processor, to take donations and pay out funds.
• Our email and WhatsApp delivery providers, to send you notifications.
• The partner hospital named on your campaign, where funds pay them directly.
• Law enforcement or regulators, where we are legally required to respond.

Campaign and donation records are retained for seven years to satisfy nonprofit financial reporting obligations. Verification documents are retained for the life of the campaign plus two years, after which they are deleted. You may ask us to delete your account at any time; we will remove everything we are not legally required to keep.

You can ask us to access, correct, export or delete your personal information, and you can withdraw consent for marketing messages at any time. Write to us using the details on our contact page and we will respond within 30 days.

Traffic is encrypted in transit. Verification documents are stored on access-controlled storage separate from public campaign assets, and administrative access is limited to the review team. No system is perfectly secure, so if we ever discover a breach affecting your data we will tell you promptly.

We will update the date at the top of this page whenever this policy changes, and notify account holders by email for any change that materially affects them.