Privacy policy

This policy covers information collected through this website, donation flows, contact forms, direct messages, email, WhatsApp, social channels, donor updates, and programme-support conversations.

It does not cover third-party websites, payment processors, social-media platforms, or partner organisations that operate their own services. When you use those services, their own privacy terms also apply.

When you donate: your name, contact details, billing country, donation amount, selected care fund, donation frequency, message or dedication, and receipt details. Card details are handled by the payment processor; we do not store full card numbers.

When you contact us: your name, email address, phone number or WhatsApp number, message content, topic, and any documents or context you choose to provide.

When you ask about healthcare support: the information you voluntarily share so we can understand the request, such as the care barrier, appointment timing, referral context, medicine need, or partner contact.

When you sign up for updates: your email address, communication preferences, and basic engagement information such as whether an email was delivered or unsubscribed.

When you appear in a story, photo, or field update: consent records, captions, context, images, and publication preferences.

When you browse the site: standard technical data such as IP address, device and browser type, requested URL, timestamp, cookie preferences, security logs, and error diagnostics.

Some requests may involve health-related information. Please share only what is necessary for us to understand the request or route it to the right person.

We treat health-related information as sensitive. We use it only for the purpose it was shared for, such as assessing a support request, coordinating with a partner, arranging follow-up, or documenting the support internally.

We do not publish medical details, diagnoses, addresses, full names, or identifiable care histories without specific consent. Public updates are written to protect dignity and privacy.

We are not a hospital, clinic, emergency service, or medical provider. If someone needs urgent medical help, they should contact local emergency services or a qualified healthcare provider immediately.

Some programme work may involve children or family members. We collect and publish information about children only where a parent, guardian, authorised partner, or appropriate caregiver has provided the necessary permission.

We avoid publishing full names, precise addresses, clinic details, medical details, daily routines, or other information that could put a child or family at risk.

If you believe a child's information has been shared with us or published in error, contact us and we will review it promptly.

To process donations, issue acknowledgements, maintain donation records, and respond to donor questions.

To route messages to the right person and reply to contact, partnership, press, or support requests.

To assess and coordinate healthcare-support requests with appropriate internal team members and trusted partners.

To operate care funds, plan field work, coordinate logistics, review outcomes, and prepare privacy-safe donor updates.

To send mission or care updates when you have asked to receive them, and to let you unsubscribe or change preferences.

To protect the site, prevent fraud or misuse, troubleshoot errors, and keep records required for governance, accounting, audit, and legal purposes.

To improve our communications and services without using advertising trackers or selling personal data.

Where data-protection law requires a legal basis, including Ghana's Data Protection Act, 2012 (Act 843) where applicable, we rely on consent, performance of a requested service, legal obligation, vital or public-interest considerations where relevant, and legitimate interests such as security, governance, and responsible programme administration.

Where we rely on consent, such as optional updates, publication permissions, or some sensitive information, you can withdraw that consent by contacting us. Withdrawal does not affect lawful processing already completed before the withdrawal.

Payment processors, banks, mobile-money providers, and fraud-prevention services where needed to process a donation.

Email, hosting, analytics, security, and support providers that help us operate the website and communications.

Trusted healthcare, community, or logistics partners where necessary to assess, deliver, verify, or follow up on a support request.

Professional advisers, auditors, accountants, insurers, or governance reviewers where needed for responsible administration.

Regulators, law-enforcement agencies, courts, or public authorities where we are legally required or need to protect rights, safety, or integrity.

Social-media platforms only when you choose to interact with us there, or when content has been approved for publication.

We do not sell personal data and we do not share it with advertisers or data brokers.

Some service providers may process data outside Ghana, including hosting, email, payment, or security providers. When this happens, we take reasonable steps to use reputable providers and appropriate contractual or technical safeguards.

Supporters, partners, and team members may also be based in different countries. We limit access to people who need the information for their role.

We use reasonable administrative, technical, and organisational safeguards to protect personal data, including access controls, secure service providers, limited internal access, and careful handling of sensitive programme information.

No website or communication channel is perfectly secure. If we become aware of a breach that creates a meaningful risk to affected people, we will take steps to contain it, restore integrity, and notify affected people or authorities where required.

Donation, receipt, accounting, and governance records are kept for as long as required for legal, accounting, audit, and reporting purposes.

Contact-form and general enquiry messages are usually kept for up to 24 months unless the conversation is ongoing or we need the record for governance or legal reasons.

Healthcare-support records are kept only as long as needed for coordination, follow-up, accountability, safeguarding, and legal or governance requirements.

Newsletter records are kept until you unsubscribe or ask us to remove them, plus a short period needed to honour suppression and audit records.

Server and security logs are usually kept for up to 30 days unless needed longer to investigate abuse, fraud, errors, or security incidents.

Story, media, and consent records are kept while the content remains published and for a reasonable period afterward so we can honour consent, removal, or attribution requests.

You may ask to access, correct, update, restrict, or delete personal data we hold about you, subject to legal, accounting, safeguarding, or legitimate record-keeping requirements.

You may object to some uses of your information, withdraw consent where we rely on consent, unsubscribe from updates, or ask us to review a story, image, or field note that identifies you or your family.

We may need to verify your identity before acting on a request. If we cannot complete a request, we will explain why where we are able to do so.

If you are not satisfied with our response, you may contact the Ghana Data Protection Commission or your local data-protection authority.

We use cookies and similar technologies that are necessary to run the site, remember preferences, support the donation journey, secure forms, and troubleshoot errors.

We do not use behavioural advertising trackers. If we introduce optional analytics or marketing cookies later, we will update this policy and provide the consent controls required by applicable law.

You can clear or block cookies in your browser. Some parts of the site, especially the donation flow, may not work properly without necessary cookies.

We publish stories, photos, and field notes only when we believe we have the right consent and when publication will not compromise dignity, safety, or privacy.

Some details may be changed, shortened, anonymised, or withheld to protect beneficiaries and families. We do not publish private medical details unless there is clear, specific permission and a strong reason to do so.

If you appear in a story or image and want it removed, corrected, or attributed differently, contact us and we will review the request promptly.

We may update this policy as our work, services, providers, or legal obligations change. The last-updated date shows the current version.

If a change is material, we will make it reasonably visible on the site or through our usual update channels before or shortly after it takes effect.

For privacy questions, data requests, story or image concerns, or anything unclear in this policy, email hello@healthhopefoundation.org or use the contact page.

Registered office: House Number 3, Templesi Lane, near Brazilian Embassy, Airport Residential, Accra, Ghana. Postal address: P.O. Box OS 853, Osu-Accra.