Legal
Privacy policy
How we collect, use and protect your personal data.
Last updated: 27 October 2026
IT4YUS ("we", "us") helps young people in Oshiri, Ebonyi State, Nigeria learn digital skills. We respect your privacy and collect as little personal data as we can. This policy explains what we collect through it4yu.org, why, how long we keep it, and the choices you have.
Who we are
IT4YUS (Information Technology for Youth Advancement Foundation) is registered in Nigeria with the Corporate Affairs Commission, RC 168979. We are based in Oshiri, Onicha, Ebonyi State, Nigeria.
We are the "data controller" for the personal data described here. For any privacy question or request, email hello@it4yu.org.
What we collect and why
| When you… | We collect | Why | Lawful basis | How long we keep it |
|---|---|---|---|---|
| Send a message through our contact form | Your name, email address, the topic you choose and your message | To reply to you and handle your request (for example volunteering, partnership or press) | Our legitimate interest in responding to people who contact us; or steps you ask us to take before an agreement | 24 months after our last reply, then deleted |
| Apply for the IT Debate on behalf of a school | School details; the teacher coordinator's name, phone number and (optionally) email; the principal's name; each student's name and class; and whether parents or guardians consent to photos | To run the debate, contact the school and print certificates | Our legitimate interest in running the debate, with the school confirming parental or guardian consent for each student | 24 months after the debate, then deleted (certificates and published results may be kept) |
| Sign up for our newsletter | Your first name, email address and the date you signed up | To send you occasional updates about our work | Your consent, which you can withdraw at any time | Until you unsubscribe. We then keep only your email on a "do not contact" list so we don't add you again |
| Donate | We do not collect card or bank details. Payments are handled by Squadco. Squadco may share with us the details you give it, such as your name, email address and the amount and date of your gift | To record and thank you for your gift and to meet our legal and accounting duties | Legal obligation and our legitimate interest in managing donations | 6 years for financial records, or longer if the law requires |
| Use any form on the site | Spam-protection signals about your browser and device, processed by Cloudflare Turnstile; your IP address, held briefly to stop repeated submissions | To keep our forms free of spam and abuse | Our legitimate interest in keeping the site secure | Turnstile: as set out in Cloudflare's policy. Rate-limit records: no more than 24 hours |
| Visit the site | Standard server logs (IP address, browser type, pages requested, time) kept by our hosting providers | To run the site securely and fix problems | Our legitimate interest in operating a secure website | As set by our providers, typically 30 days |
| Play a video | If you click play, the video loads from YouTube in privacy-enhanced mode (youtube-nocookie.com). YouTube may then collect data under Google's privacy policy | To show you the video you chose to watch | Your choice to play the video | Set by Google |
We do not sell your personal data, use it for advertising, or make automated decisions about you.
Cookies
We do not use advertising or analytics cookies. Our site works without cookies. Cloudflare Turnstile may use technology that is strictly necessary to tell people from bots when you submit a form. If we ever add analytics, we will update this policy and ask for your consent first where the law requires it.
Children and young people
Much of our work is with young people under 18. Our website is meant for adults: supporters, parents, teachers and partners.
- Forms: if you are under 18, please ask a parent, guardian or teacher to contact us for you. If we learn that we hold data from a child without that permission, we will delete it.
- Photos: photos of students on this site are used with the permission of the student's parent, guardian or school. If you are pictured, or your child is, and you would like a photo removed, email hello@it4yu.org and we will remove it promptly, normally within 7 days.
- Stories and quotes: we publish a scholar's name, words or photo only with their agreement, or their parent's or guardian's agreement if they are under 18.
Who we share data with
We share personal data only with service providers who help us run the site, under contracts that require them to protect it and use it only on our instructions:
- Microsoft Azure (Microsoft Corporation): website hosting, the forms service, sending contact-form emails (Azure Communication Services) and storing newsletter sign-ups (Azure Table Storage).
- Cloudflare: website security and spam protection (Turnstile), and domain name services.
- Squadco: processing donations.
- GitHub (Microsoft): storing the website's content. Only our staff and volunteer editors sign in; visitors' data is not stored there.
- Google / YouTube: only if you choose to play a video.
- Our email provider: receiving and answering your messages.
We may also share data if the law requires it, or to protect the safety of a young person.
International transfers
Some of our providers store or process data outside Nigeria, for example in the European Union, the United Kingdom or the United States. When that happens, we rely on the safeguards allowed under the Nigeria Data Protection Act 2023 and, where it applies, UK GDPR, such as standard contractual clauses and the provider's own data protection commitments.
How we protect your data
We use providers with strong security, encrypt data in transit (HTTPS), restrict access to the few people who need it, use multi-factor sign-in for admin accounts, and keep form data only as long as this policy says.
Your rights
Under the Nigeria Data Protection Act 2023, and UK GDPR where it applies to you, you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- object to, or ask us to restrict, how we use your data
- withdraw your consent at any time (for example by unsubscribing), without affecting what we did before
- ask for your data in a portable format
To use any of these rights, email hello@it4yu.org. We will reply within 30 days, free of charge. We may need to confirm your identity first.
You can unsubscribe from our newsletter at any time using the link in every email, or by emailing us.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to:
- Nigeria: the Nigeria Data Protection Commission (NDPC), ndpc.gov.ng
- United Kingdom: the Information Commissioner's Office (ICO), ico.org.uk
- European Union: the data protection authority in your country
Changes to this policy
We may update this policy when our website or the law changes. We will change the "Last updated" date above and, for significant changes, tell newsletter subscribers.
Contact
IT4YUS · Oshiri, Onicha, Ebonyi State, Nigeria · hello@it4yu.org · RC 168979