Privacy Policy & Data Protection

Diaspora Together Trust and Support Association (DTTASA) | CAC RN 8583605 | Last updated 31 October 2026

1. Who we are

This policy explains how the Diaspora Together Trust and Support Association ("DTTASA", "we", "us"), a non-profit registered with the Corporate Affairs Commission of Nigeria (registration number 8583605), collects and protects personal data through this website, dttasa.org, and in our work with members, beneficiaries and donors.

DTTASA is the data controller. Our registered office is No. 17 Ehenden Street, off Upper Sakponba Road, Benin City, Edo State 300001, Nigeria. DTTASA is led from both Nigeria and the United Kingdom and is registered with the UK Information Commissioner's Office (ICO) under registration number ZC274661.

We follow the Nigeria Data Protection Act 2023 and, for people in the UK and Europe, the UK GDPR and the EU GDPR. Our Terms of Use, Refund Policy and Cookie Policy sit beside this policy. Our other services have their own notices: the DTTASA Portal privacy policy (staff and volunteers) and the privacy policy inside DTTASA Haven.

2. What we collect and why

  • When you contact us: your name, email address, subject and message from the contact form, so we can reply. The form is delivered to our info@dttasa.org mailbox by a form service, FormSubmit. Legal basis: our legitimate interest in answering you.
  • When you donate: the amount, your email address for the receipt, and any cause you choose. Payments are taken by Paystack; your card details go straight to Paystack and we never see or store them. If you give through GoFundMe, GoFundMe's own privacy policy applies. Legal basis: carrying out your donation, and our legal duty to keep financial records.
  • Members: contact and membership details, and records of any contributions members have made. Legal basis: our membership agreement with you.
  • Beneficiaries: the information needed to arrange healthcare consultations, medication support and scholarships. Health information is sensitive, so we collect it only with your explicit consent, keep it to the minimum, and let only the people arranging your support see it. Legal basis: your explicit consent.
  • Visiting this website: see section 3 on cookies.

We never sell personal data, and we do not make automated decisions about you.

3. Cookies and outside services on this website

We ask before anything that sets cookies runs. When you first visit, a notice offers Accept cookies and Reject cookies side by side; until you choose, and if you reject, none of the services below sets a cookie. We keep your choice in your browser for 6 months, and you can change it at any time from Cookie settings at the foot of every page.

  • Google Ads (only if you accept): a Google tag measures whether people arrive from our adverts. It sets cookies and sends Google technical data such as your IP address and browser.
  • YouTube and GoFundMe (only if you accept, or when you press Show): our videos and our GoFundMe campaign are held back until you accept cookies or press Show on that video or campaign. YouTube and GoFundMe may then set their own cookies.
  • Fonts, icons and page content: our fonts, icons and pictures are hosted on dttasa.org itself, so your browser contacts no font or image service. Our news, events, gallery and leadership pages, and our live figures, are read from Google Firebase, which receives your IP address to deliver them and sets no advertising cookies.

You can also block or delete cookies in your browser settings; the website works fully without them. Every cookie and browser record, and how long each lasts, is listed in our Cookie Policy.

4. Social media metrics (TikTok and Meta)

To measure the reach of our "Together, We Build Beyond Borders" campaign we use the official TikTok and Meta APIs to read our own account statistics only:

  • user.info.stats: our follower count and total likes.
  • video.list: the reach of our own videos, such as project updates and cultural content.

This data is for internal use by DTTASA's leadership only. It is never sold, shared with advertisers, or used to track individual people.

5. Who we share data with

Only with the service providers that make our work possible, each under its own data protection terms, and only what each needs:

  • Google (Workspace email and Firebase website hosting)
  • FormSubmit (delivers contact form messages)
  • Paystack and GoFundMe (donations)
  • Banks and financial institutions that manage cooperative funds
  • Healthcare providers giving free consultations, only with the beneficiary's consent
  • Regulators, auditors and legal advisers, only when the law requires it

6. Data outside your country

DTTASA works across Nigeria, the UK and the wider diaspora, and our providers store data in Nigeria, the UK, the European Union and the United States. When data leaves the country it was collected in, we rely on the provider's data protection terms, including standard contractual clauses, and on the transfer rules of the Nigeria Data Protection Act and the UK GDPR.

7. How long we keep it

  • Contact messages: up to 2 years after our last reply, then deleted.
  • Donation and financial records: 7 years, as accounting and audit law requires.
  • Member records: while you are a member, then 7 years for contribution and financial records.
  • Beneficiary records: while we support you; health details are deleted 2 years after support ends, and only the financial record of the support is kept for 7 years.

8. Your rights

You can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct anything that is wrong;
  • delete your data, unless the law requires us to keep it;
  • restrict or object to how we use it;
  • give you your data in a format you can take elsewhere;
  • withdraw a consent you gave, at any time, without affecting what we did before.

Email us (section 10) and we will reply within one month. How to ask for your data to be deleted, for each of our services, is on our Delete your data page.

Complaints. If you are unhappy with how we have used your personal data, or how we answered you, please tell us first: email president@dttasa.org with the subject "Data protection complaint", or tell any member of our team, who will pass it on the same working day. We will acknowledge your complaint within 30 days, look into it, and tell you what we found and what we have done. If you are still unhappy you can complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113; our registration number is ZC274661) or the Nigeria Data Protection Commission (ndpc.gov.ng). We would appreciate the chance to put things right first.

9. Security, children and changes

Data is encrypted in transit, access is limited to the people who need it, and we will tell you and the regulator promptly if a breach puts your data at risk. This website is not aimed at children under 13, and we do not knowingly collect their data. When we change this policy we update the date at the top of this page.

10. Contact us

Data protection questions and requests: president@dttasa.org

General enquiries: info@dttasa.org | support@dttasa.org

Phone: +44 7396 978981

Registered office: No. 17 Ehenden Street, off Upper Sakponba Road, Benin City, Edo State 300001, Nigeria.

© 2026 Diaspora Together Trust and Support Association. All Rights Reserved. Together, We Build Beyond Borders.