Who we are

The Game Changer Group (TGCG) is a grassroots political mobilisation movement based in Abuja, Federal Republic of Nigeria. In this policy, "we", "us", and "our" refer to TGCG. TGCG is the data controller responsible for the personal data collected through this website.

We are committed to protecting your personal data and handling it in line with the Nigeria Data Protection Act 2023 (NDPA). If you have any question about this policy, please contact us using the contact details on our website.

What this policy covers

This policy explains what personal data we collect through this website, why we collect it, how we use and protect it, who we share it with, and the rights you have over it. It applies to donors, volunteers, and anyone who contacts us or browses the site.

It does not cover websites we link to. Those sites have their own privacy policies, which we do not control (see section 13).

Information we collect

Information you give us

We collect the details you enter into our forms:

• Donations: your full name, email address, phone number, and the amount and frequency of your contribution.
• Volunteering: your full name, state, and phone number.
• Enquiries: any name, contact details, or message you send us directly.

Information we collect automatically

When you visit the site, we may collect limited technical data, such as your IP address, browser and device type, the pages you view, and the date and time of your visit. This helps us keep the site secure and understand how it is used. Some of this is collected through cookies (see section 7).

Card details

We do not collect or store your card details. When you make a donation, your payment information is entered directly into the secure systems of our payment provider (see section 6).

How we use your information

We use your personal data to:

• process your donation and send you a confirmation or receipt;
• keep the records of contributions that Nigerian law requires;
• respond to your enquiries and contact you about volunteering, drives, and events you signed up for;
• share civic and campaign updates where you have agreed to receive them;
• protect the site and prevent fraud or misuse;
• meet our legal and regulatory obligations.

Under the NDPA, we rely on the following lawful bases: your consent (for example, when you opt in to updates), our need to take steps at your request and deliver what you asked for (processing a donation you initiated), our legal obligation (keeping donation records and meeting electoral rules), and our legitimate interest in running the movement and keeping the site secure, balanced against your rights.

Donations and legal disclosure

Political contributions in Nigeria are regulated. To comply with the Electoral Act 2022 and related rules:

• donations are identified, capped, and recorded. A single individual, group, or entity may not contribute more than fifty million naira (₦50,000,000);
• we cannot accept fully anonymous contributions above a low threshold, because we are required to keep records of who contributed;
• we may be required to disclose contribution records to regulators or other lawful authorities where the law requires it.

By making a donation, you understand that the details attached to your contribution are recorded and retained for these compliance purposes.

Payments and security

Donations are processed securely by Paystack, a licensed Nigerian payment service provider. Your card details are handled entirely within Paystack's secure environment, which meets the Payment Card Industry Data Security Standard (PCI-DSS). This website does not see or store any card data.

To protect the data we do hold, we use encryption in transit (TLS), regular backups, and restricted, role-based access, so that only authorised people can reach your information. No system can be guaranteed to be completely secure, but we work to protect your data and to respond promptly if a problem arises.

Cookies

Cookies are small files stored on your device that help a website work and remember your preferences. This site may use:

• Essential cookies, needed for the site and the donation form to function;
• Preference cookies, which remember choices such as your language;
• Analytics cookies, which help us understand how the site is used, if enabled.

You can control or delete cookies through your browser settings. Blocking essential cookies may stop parts of the site from working.

How we share your information

We do not sell or rent your personal data. We share it only where necessary:

• Service providers who help us operate the site and process donations, such as our payment provider and hosting provider, under agreements that require them to protect your data;
• Regulators and lawful authorities, where we are legally required to disclose information, including donation records under electoral rules;
• Our coordinators and organisers, on a need-to-know basis, for example to follow up with a volunteer about a drive in their area.

Where your data is processed

Your personal data is processed and stored in Nigeria. In line with Nigerian rules on political funds, contributions are made using Nigerian naira instruments and received inside Nigeria.

Where any service provider processes data outside Nigeria, we will only allow it under the safeguards the NDPA requires to keep your data protected.

How long we keep your data

We keep your personal data only for as long as we need it for the purposes in this policy, and for as long as the law requires. Donation and contribution records are kept for the retention period set by applicable financial and electoral rules. When data is no longer needed, we delete it or make it anonymous.

Your rights

Under the Nigeria Data Protection Act 2023, you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, where there is no legal reason for us to keep it;
• ask us to restrict or object to how we use your data;
• withdraw your consent at any time, where we relied on consent;
• ask us to transfer your data to you or another provider, where this applies;
• lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, contact us using the contact details on our website. We will respond within the timeframe the NDPA allows. Note that we may need to keep donation records even after a deletion request, where the law requires it (see section 5).

Children

This website and its donation and volunteer forms are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

Links to other sites

Our site may link to other websites and to our social media pages. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before sharing your data with them.

Changes to this policy

We may update this policy from time to time. When we do, we will post the revised version on this page. For significant changes, we will provide a more prominent notice. Please check this page from time to time to stay informed.