Last Revised: April 2026

Charity Number: 1217758 (England and Wales)

Divy Health is a registered charity (Charity No. 1217758) committed to improving health outcomes for women and girls across communities globally, including Nigeria, the United Kingdom, and other African countries. We are dedicated to protecting the privacy and personal data of everyone who interacts with our work.

This Privacy Policy explains how Divy Health collects, uses, and protects information about you when you visit our website, attend our events, sign up to our mailing list, make a donation, or otherwise engage with us. Please read this policy carefully before submitting any information to us.

By using our website or providing us with your information, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our site or submit your information to us.

Because Divy Health operates in Nigeria and is registered in England and Wales with plans to expand across other African countries and the UK this policy is designed to reflect applicable data protection laws, including the Nigeria Data Protection Act (NDPA) 2023, the UK General Data Protection Regulation (UK GDPR), and, where relevant, EU GDPR requirements.

I. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or best practices. Any changes will be effective immediately upon posting to our website and will apply to your use of our services after the revised “Last Revised” date shown above.

We encourage you to review this policy periodically. Your continued use of our website or services following any update constitutes your acceptance of the updated policy.

II. Information We Collect

A. Information You Provide Directly

We collect personal information that you voluntarily provide when you:

Sign up to receive our newsletter or email updates
Make a donation to support our programmes
Register for an event, webinar, or community activity
Submit an enquiry or contact us via our website or forms
Volunteer, partner, or apply to work with us
Participate in surveys, campaigns, or outreach activities

The types of information we may collect include:

First and last name
Email address
Postal address and country of residence
Phone number
Payment details (e.g., via secure third-party payment processors)
Any additional information you choose to share with us

B. Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

Browser type, device type, and operating system
IP address and approximate location (country or city level)
Pages visited, time spent on pages, and referring URLs
Information collected through cookies and similar tracking technologies

This information is primarily used to improve our website experience and understand how visitors engage with our content.

C. Cookies and Tracking Technologies

Our website uses cookies small text files stored on your device to help us understand site usage and improve functionality. We may also use web beacons (tracking pixels) in emails to understand open rates and engagement.

You can control cookie settings through your browser. Most browsers allow you to block or delete cookies, though doing so may affect certain features of our website. See Section VII (Your Choices) for more details.

D. Information from Third Parties

We may receive information about you from third-party platforms where you interact with our content, such as social media sites or fundraising platforms, in accordance with their own privacy policies and your account settings.

III. How We Use Your Information

We use personal information we collect for the following purposes:

To respond to your enquiries, comments, and requests
To send you updates, newsletters, and information about our programmes and events (where you have opted in)
To process donations and issue appropriate acknowledgements or receipts
To administer volunteer, partner, or collaboration arrangements
To deliver and improve our educational programmes and outreach activities
To monitor and analyse website traffic and user engagement to improve our site
To comply with applicable legal and regulatory obligations
To safeguard the integrity and security of our operations

Divy Health operates in Nigeria and is registered in the UK. Your data may be processed in Nigeria, the UK, and in other countries where we deliver programmes. We take appropriate steps to ensure your data is protected wherever it is processed.

IV. Sharing of Information

Divy Health will never rent, sell, or exchange your personal data with third parties for commercial or marketing purposes. We may share your information only in the following limited circumstances:

With trusted service providers who assist us in operating our website, processing payments, or delivering communications (e.g., email platforms, payment processors) — these parties are bound by confidentiality obligations
With partner organisations or co-delivery partners where you have consented to or are aware of such sharing in connection with a specific programme or event
Where required by applicable law, regulation, or legal process in Nigeria, the UK, or any country where we operate
To protect the rights, safety, or property of Divy Health, our beneficiaries, or the public
In the event of a merger, restructure, or transfer of our organisation, with appropriate safeguards in place

We may share aggregated or anonymised data (which cannot identify you) for reporting, impact measurement, or research purposes.

V. Advertising and Analytics

We may use third-party analytics services (such as Google Analytics) to understand how our website is used. These services may collect data through cookies and similar technologies about your browsing activity.

We may also use social media tools such as Instagram Audiences to reach existing supporters with relevant updates. Where we do so, data shared with these platforms is transmitted securely and is used only to match against existing accounts. Your data is not retained by these platforms beyond this matching process.

VI. Information About Children

Our website and general services are intended for users aged 16 and over. However, Divy Health’s outreach programmes serve young girls and students in schools. Where we engage with children under the age of 18 in our programmes, we do so in coordination with schools, guardians, and community partners, and we collect only the information necessary to deliver educational sessions safely and effectively.

We do not knowingly collect personal data directly from children under 13 through our website. If you believe a child has submitted information to us without appropriate consent, please contact us immediately using the details in Section X below.

VII. Your Choices

Marketing Communications

You may opt out of receiving promotional emails or newsletters from us at any time by clicking the unsubscribe link in any email or contacting us directly. If you opt out, we may still send essential communications related to your donations, event registrations, or ongoing relationships.

Cookies

Most web browsers accept cookies by default. You can adjust your browser settings to refuse or delete cookies. Please note that disabling cookies may affect the functionality of our website.

Updating Your Information

You may request to update, correct, or delete your personal information at any time by contacting us at info@divyhealth.com. We will aim to respond promptly, though we may retain certain information as required by law or for legitimate organisational purposes.

VIII. Security

Divy Health takes reasonable and appropriate measures to protect your personal data from loss, unauthorised access, disclosure, alteration, and destruction. These measures include secure data storage, encrypted transmissions, and restricted access to personal data.

While we strive to protect your information, no data transmission or storage system can be guaranteed to be 100% secure. We encourage you to take appropriate steps to protect your own data when using the internet.

IX. Additional Information for Users in the UK and European Union

For users based in the UK or EU, Divy Health UK acts as a data controller under the UK GDPR and, where applicable, the EU GDPR.

Our Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

Consent for example, to send you marketing emails or newsletters
Legitimate interests for charity governance, administration, fundraising, and campaigning, where these interests are not overridden by your rights
Legal obligation where processing is required to comply with applicable law

How Long We Retain Your Data

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. For donors and supporters, we typically retain data for 7 years after your last donation or interaction with us, unless a longer retention period is required or justified. After this period, data is securely deleted or anonymised.

If you ask us not to contact you again, we will retain minimum information on a suppression list to ensure we respect your preference.

International Transfers

As Divy Health operates in Nigeria and other African countries, your data may be transferred to and processed outside the UK or European Economic Area (EEA). Where such transfers occur from Divy Health UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO). Please contact us if you wish to learn more about these safeguards.

Your Rights Under UK/EU GDPR

If you are based in the UK or EU, you have the following rights:

Right of Access to request a copy of the personal data we hold about you
Right to Rectification to request correction of inaccurate or incomplete data
Right to Erasure to request deletion of your data in certain circumstances
Right to Restrict Processing to limit how we use your data in certain situations
Right to Object to object to processing based on legitimate interests, including direct marketing
Right to Data Portability to receive your data in a structured, machine-readable format
Rights Related to Automated Decision-Making not to be subject to decisions made solely by automated processes that significantly affect you
Right to Withdraw Consent at any time, where processing is based on your consent

To exercise any of these rights, please contact us using the details in Section X below. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK at www.ico.org.uk, or with the relevant supervisory authority in your EU member state.

X. Additional Information for Users in Nigeria

Divy Health is headquartered and operates in Nigeria, where the Nigeria Data Protection Act (NDPA) 2023 governs the processing of personal data. We are committed to complying with the NDPA and the principles set out by the Nigeria Data Protection Commission (NDPC).

Under the NDPA, you have the right to:

Be informed about how your personal data is being processed
Access your personal data held by us
Request correction or deletion of your personal data
Object to the processing of your personal data
Withdraw your consent to processing at any time
Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

We process personal data in Nigeria in accordance with the NDPA, ensuring that appropriate safeguards are applied, that data is collected only for lawful and specified purposes, and that it is retained no longer than necessary.

Where Divy Health transfers data between Nigeria and the UK or other countries, we do so with appropriate safeguards to protect your privacy rights.

XI. Donor Bill of Rights

Divy Health respects and upholds the rights of all donors. We are committed to the following principles:

You will be informed of how donated resources are used and our capacity to use them effectively
You will have access to our most recent financial statements upon request
Your gifts will be used for the purposes for which they were given
You will receive appropriate acknowledgement and recognition for your support
Your donation information will be handled with respect and confidentiality, to the extent provided by law
You will be informed whether those seeking donations are volunteers, employees, or external solicitors
You may request that your name be removed from any sharing lists we maintain
You are free to ask questions about your donation and will receive honest, prompt answers

Note: No UK supporter data will be shared via mailing lists without explicit consent.

XII. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your personal data, please contact us:

Divy Health

Email: info@divyhealth.com

Website: www.divyhealth.com

Registered Charity Number: 1217758 (England and Wales)

We aim to respond to all enquiries within 30 days. If your request is particularly complex, we will notify you and may take up to an additional 30 days to respond.

Divy Health — Empowering women and girls with trusted health information and the confidence to take action on their health.

Divy Health Privacy Policy